OneCRL Entry
e5fc6acd-eeec-4530-b2b6-b8d37a206f08
Revocation Entry
- Status
- disabled
- Serial
7F57F3D2EAF1C0CBA691B003C9FBD0A4- Last Modified
- 2025-05-21 00:25:34 UTC
- Schema
- 1746810064223
Issuer
- DN
- C=US, O=Google Trust Services LLC, CN=GTS Root R3
- DN SHA-256
893a395bca7882a8990ccee966e19861ab56df23fc906141687644bfbeb2b5be- Issuer DER
MEcxCzAJBgNVBAYTAlVTMSIwIAYDVQQKExlHb29nbGUgVHJ1c3QgU2VydmljZXMgTExDMRQwEgYDVQQDEwtHVFMgUm9vdCBSMw==
Context
- Bugzilla
- 1965541
- Action
- On 2025-05-20, Ben Wilson manually added the intermediate CA certificate for SZAFIR Trusted CA3 to remote-settings-staging; on 2025-05-21, d**********r@mozilla.com approved the changes in production, and Ben Wilson confirmed 15 revoked CA certificates were in OneCRL.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- GTS Root R3
- CA Owner
- Google Trust Services LLC
AI Summary
Generated 2026-06-30 09:57 UTC · Model: gpt-5.4-miniThis bug added 15 revoked CA certificate entries to OneCRL. The initial action was initiated by the CCADB-to-OneCRL bot, which opened the bug and attached the proposed issuer/serial pairs from revoked intermediate certificates reported in the CCADB. Ben Wilson then explicitly requested adding SZAFIR Trusted CA3 to the current batch and manually added that intermediate CA certificate to remote-settings-staging before production approval. The thread states the batch contained 15 CA certificate entries and that they were approved in production on 2025-05-21. The OneCRL record for SZAFIR Trusted CA3 shows it was manually added because it was not included in the batch. The thread explicitly states the CCADB basis was revoked intermediate certificates reported in the CCADB, but it does not state a specific CCADB candidate-report state or revocation field for the full batch. No external compliance incident or CA closure is stated in the thread.
On 2025-05-20, Ben Wilson manually added the intermediate CA certificate for SZAFIR Trusted CA3 to remote-settings-staging; on 2025-05-21, d**********r@mozilla.com approved the changes in production, and Ben Wilson confirmed 15 revoked CA certificates were in OneCRL.
Explicitly stated: revoked intermediate certificates reported in the CCADB; one entry (SZAFIR Trusted CA3) was manually added because it was not included in the batch. No specific candidate-report state or revocation field beyond the revocation date 2025-03-05 for SZAFIR Trusted CA3 is stated.
Unknown / not stated
Explicit in OneCRL thread · 0.98
- 2025-05-09ccadb2onercl bot opened the bug and said it was adding entries based on revoked intermediate certificates reported in the CCADB.
- 2025-05-19Ben Wilson requested adding SZAFIR Trusted CA3 to the current batch and provided its revocation date of 2025-03-05.
- 2025-05-20Ben Wilson manually added SZAFIR Trusted CA3 to remote-settings-staging; the batch was described as 15 CA certificate entries.
- 2025-05-21d**********r@mozilla.com approved the changes in production.
- 2025-05-21Ben Wilson confirmed the 15 revoked CA certificates were now in OneCRL and his Firefox profile.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1746810064223,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1965541",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MEcxCzAJBgNVBAYTAlVTMSIwIAYDVQQKExlHb29nbGUgVHJ1c3QgU2VydmljZXMgTExDMRQwEgYDVQQDEwtHVFMgUm9vdCBSMw==",
"serialNumber": "f1fz0urxwMumkbADyfvQpA==",
"id": "e5fc6acd-eeec-4530-b2b6-b8d37a206f08",
"last_modified": 1747787134537
}