OneCRL Entry
e38a7b90-5516-4383-9dc2-b0322ce1cad5
Revocation Entry
- Status
- disabled
- Serial
434267BEC68C2AD2846B83AB719FDEB0- Last Modified
- 2025-07-14 21:43:28 UTC
- Schema
- 1752253362243
Issuer
- DN
- C=CN, O=UniTrust, CN=UCA Global G2 Root
- DN SHA-256
eff713ded0ec4d433b0b25a8d4a698aba0bef85a9ad3536e271acf9a96ce469b- Issuer DER
MD0xCzAJBgNVBAYTAkNOMREwDwYDVQQKDAhVbmlUcnVzdDEbMBkGA1UEAwwSVUNBIEdsb2JhbCBHMiBSb290
Context
- Bugzilla
- 1976939
- Action
- On 2025-07-11, the ccadb2onercl bot opened the bug and proposed adding 16 issuer/serial OneCRL entries derived from CCADB-reported revoked intermediate certificates. Ben Wilson confirmed the decoded list on 2025-07-12 and approved it for staging review. Dana Keeler approved the batch in staging on 2025-07-14 after checker output showed 16 changes waiting in production, and later approved it in production the same day. Ben Wilson verified the change in Firefox Nightly and Beta profiles on 2025-07-15.
- Confidence
- Explicit in OneCRL thread · 0.97
CCADB Link
- Issuer CA
- UCA Global G2 Root
- CA Owner
- Asseco Data Systems S.A.
AI Summary
Generated 2026-06-30 11:13 UTC · Model: gpt-5.4Bug 1976939 was created by the Common CA Database to OneCRL Bot on 2025-07-11 to add OneCRL entries based on revoked intermediate certificates reported in the CCADB. The bug proposed 16 issuer-and-serial entries spanning certificates associated with OISTE WISeKey, UniTrust, GoDaddy, Starfield, Sectigo/Comodo, and Actalis. Ben Wilson decoded and confirmed the entries, stated they were the correct entries to add to OneCRL, and said TLS Canary was not needed for this batch. Review then proceeded through staging and production approval, with Dana Keeler reporting 16 changes waiting in production and later approving them in production. The resulting OneCRL records in the provided entry list are all disabled=false? No; they are enabled set to false, matching OneCRL blocklist-style entries as stored in the dataset. The thread explicitly ties qualification to revoked intermediate certificates reported in CCADB, but it does not state per-certificate revocation reasons, revocation dates, or candidate-report field values. The thread also does not cite any external compliance incident, mailing-list discussion, or CA closure as the cause of these revocations.
On 2025-07-11, the ccadb2onercl bot opened the bug and proposed adding 16 issuer/serial OneCRL entries derived from CCADB-reported revoked intermediate certificates. Ben Wilson confirmed the decoded list on 2025-07-12 and approved it for staging review. Dana Keeler approved the batch in staging on 2025-07-14 after checker output showed 16 changes waiting in production, and later approved it in production the same day. Ben Wilson verified the change in Firefox Nightly and Beta profiles on 2025-07-15.
Explicitly stated as revoked intermediate certificates reported in the CCADB; no per-certificate revocation reason, revocation date, candidate report state, or manual-addition explanation is stated in the thread.
unknown
Explicit in OneCRL thread · 0.97
- 2025-07-11ccadb2onercl bot filed Bug 1976939 stating it was adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.
- 2025-07-11The bot attached the issuer/serial list, proposed OneCRL additions, and a decoded attachment.
- 2025-07-12Ben Wilson posted decoded entries for the 16 certificates.
- 2025-07-12Ben Wilson stated these were the correct entries to add to OneCRL and that TLS Canary was not needed.
- 2025-07-14Dana Keeler reported checker output showing 16 changes waiting in production and approved the batch in staging.
- 2025-07-14Ben Wilson reconfirmed the production list matched the earlier attachment.
- 2025-07-14Dana Keeler approved the changes in production.
- 2025-07-15Ben Wilson verified the change in Firefox Nightly and Beta Release profiles.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1752253362243,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1976939",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MD0xCzAJBgNVBAYTAkNOMREwDwYDVQQKDAhVbmlUcnVzdDEbMBkGA1UEAwwSVUNBIEdsb2JhbCBHMiBSb290",
"serialNumber": "Q0JnvsaMKtKEa4OrcZ/esA==",
"id": "e38a7b90-5516-4383-9dc2-b0322ce1cad5",
"last_modified": 1752529408890
}