OneCRL Entry
dd781eef-2b60-4ff1-a1d1-2c65c31915fa
Revocation Entry
- Status
- disabled
- Serial
17BA09A81F8E368368C25E5E1CE3A5F284839DED- Last Modified
- 2024-03-11 20:41:35 UTC
- Schema
- 1709717394495
Issuer
- DN
- C=CN, O=iTrusChina Co.,Ltd., CN=vTrus ECC Root CA
- DN SHA-256
f5456432a2aa8c27ff372c3cd003c717ea5554b466e58ad759b95c4636eafa7d- Issuer DER
MEcxCzAJBgNVBAYTAkNOMRwwGgYDVQQKExNpVHJ1c0NoaW5hIENvLixMdGQuMRowGAYDVQQDExF2VHJ1cyBFQ0MgUm9vdCBDQQ==
Context
- Bugzilla
- 1884400
- Action
- Five disabled OneCRL entries, identified by issuer DN and serial number, were proposed by the Common CA Database to OneCRL Bot on 2024-03-08, reviewed by Mozilla staff, approved in Kinto Production by John Schanck on 2024-03-11, and confirmed visible in Firefox Nightly and Beta on 2024-03-12.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- vTrus ECC Root CA
- CA Owner
- iTrusChina Co., Ltd.
AI Summary
Generated 2026-06-30 11:41 UTC · Model: gpt-5.4Bug 1884400 tracked the addition of five certificate issuer/serial entries to Mozilla OneCRL. The bug was created automatically on 2024-03-08 by the Common CA Database to OneCRL Bot, which stated that the entries were being added based on revoked intermediate certificates reported in the CCADB. The proposed entries covered two serials under vTrus ECC Root CA, two serials under vTrus Root CA, and one serial under IdenTrust Commercial Root CA 1. Ben Wilson confirmed on 2024-03-09 that these were the correct entries to add and said TLS Canary was not needed for this batch. John Schanck later verified staging/preview state and listed the five pending production additions, and Ben Wilson approved production on 2024-03-11. John Schanck then approved the changes in production, and Ben Wilson confirmed on 2024-03-12 that the changes appeared in Nightly and Beta Firefox profiles and at crt.sh's Mozilla OneCRL view. The thread does not state the individual CCADB revocation reasons or dates for the five certificates. The thread also does not explicitly identify any external compliance incident or CA closure as the cause of these revocations.
Five disabled OneCRL entries, identified by issuer DN and serial number, were proposed by the Common CA Database to OneCRL Bot on 2024-03-08, reviewed by Mozilla staff, approved in Kinto Production by John Schanck on 2024-03-11, and confirmed visible in Firefox Nightly and Beta on 2024-03-12.
Explicitly stated as additions based on revoked intermediate certificates reported in the CCADB; no specific revocation reason, revocation date, or candidate-report field state is given in the thread.
unknown
Explicit in OneCRL thread · 0.98
- 2024-03-08CCADB to OneCRL Bot opened Bug 1884400 and said entries were being added based on revoked intermediate certificates reported in the CCADB.
- 2024-03-08Bot attached issuer/serial pairs, proposed OneCRL additions, and decoded entry details.
- 2024-03-09Ben Wilson confirmed these were the correct entries to add and said TLS Canary was not needed.
- 2024-03-10John Schanck posted staging/preview verification output showing five changes waiting in production.
- 2024-03-11Ben Wilson approved proceeding with Kinto Production approval.
- 2024-03-11John Schanck stated that the changes were approved in production.
- 2024-03-12Ben Wilson confirmed the changes appeared in Nightly and Beta Firefox profiles and at crt.sh/mozilla-onecrl.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1709717394495,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1884400",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MEcxCzAJBgNVBAYTAkNOMRwwGgYDVQQKExNpVHJ1c0NoaW5hIENvLixMdGQuMRowGAYDVQQDExF2VHJ1cyBFQ0MgUm9vdCBDQQ==",
"serialNumber": "F7oJqB+ONoNowl5eHOOl8oSDne0=",
"id": "dd781eef-2b60-4ff1-a1d1-2c65c31915fa",
"last_modified": 1710189695297
}