← OneCRL Browser

OneCRL Entry

f48493ce-ff35-4488-bcf3-d7346a1141a2

Revocation Entry

Status
enabled
Serial
0864
Last Modified
2020-02-13 21:11:20 UTC
Schema
1581547557131

Issuer

DN
CN=TÜRKTRUST Elektronik Sunucu Sertifikası Hizmetleri, C=TR, O=TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş. (c) Kasım 2005
DN SHA-256
a94bf12fc9bdd7d1980cc2a17dc508213286676a35ace6a2d4a9af5dbd1bffb5
Issuer DER
MIGsMT0wOwYDVQQDDDRUw5xSS1RSVVNUIEVsZWt0cm9uaWsgU3VudWN1IFNlcnRpZmlrYXPEsSBIaXptZXRsZXJpMQswCQYDVQQGEwJUUjFeMFwGA1UECgxVVMOcUktUUlVTVCBCaWxnaSDEsGxldGnFn2ltIHZlIEJpbGnFn2ltIEfDvHZlbmxpxJ9pIEhpem1ldGxlcmkgQS7Fni4gKGMpIEthc8SxbSAgMjAwNQ==

Context

Bugzilla
1614521
Action
On 2020-02-12 J.C. Jones prepared three OneCRL entries for the DigiNotar Root CA and two TURKTRUST mis-issued intermediates; on 2020-02-13 Dana Keeler signed the changes and they went live.
Confidence
Explicit in OneCRL thread · 0.98

CCADB Link

Issuer CA
CA Owner

AI Summary

Generated 2026-06-30 10:55 UTC · Model: gpt-5.4-mini

This Bugzilla case added three OneCRL revocation entries: the DigiNotar Root CA, TURKTRUST Mis-issued Intermediate CA 1, and TURKTRUST Mis-issued Intermediate CA 2. The action was initiated by J.C. Jones (:jcj) after Dana Keeler raised that NSS distrust records did not work in Firefox because Firefox backtracks during path building. Kathleen Wilson suggested adding the affected records to OneCRL, and J.C. Jones prepared the Kinto changes and attachments. The entries were signed and made live on 2020-02-13. The thread explicitly states the TURKTRUST entries were added by issuer-and-serial, while the DigiNotar root was added by subject and public key hash. The thread does not state a CCADB revocation trigger or candidate-report state for these entries; qualification appears to have been a manual OneCRL migration of existing NSS distrust records. The external cause is explicit for the TURKTRUST entries via Bug 825022, and the DigiNotar root is tied to the long-standing DigiNotar distrust incident, but the thread does not describe a new compliance event or CA closure as the immediate cause.

OneCRL action

On 2020-02-12 J.C. Jones prepared three OneCRL entries for the DigiNotar Root CA and two TURKTRUST mis-issued intermediates; on 2020-02-13 Dana Keeler signed the changes and they went live.

CCADB trigger

Unknown / not stated; the thread describes a manual migration of existing NSS distrust records into OneCRL, not a CCADB revocation field or candidate-report state.

External cause

TURKTRUST entries are explicitly linked to Bug 825022; the DigiNotar root is explicitly described as an existing distrust record from the DigiNotar incident. No separate CA closure or CCADB compliance incident is stated as the immediate trigger.

Confidence

Explicit in OneCRL thread · 0.98

Chronology
  • 2020-02-11Dana Keeler reported NSS distrust records for DigiNotar did not work in Firefox because Firefox backtracks during path building.
  • 2020-02-11Kathleen Wilson suggested adding the affected distrust records to OneCRL.
  • 2020-02-12J.C. Jones audited certdata.txt and prepared three new OneCRL exceptions.
  • 2020-02-13Dana Keeler signed the Kinto changes and the OneCRL entries went live.

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Raw Remote Settings Record

{
    "schema": 1581547557131,
    "details": {
        "bug": "1614521",
        "who": "jc@mozilla.com",
        "why": "Migrate NSS-exceptions to OneCRL - Explicitly Distrust TURKTRUST Mis-issued Intermediate CA 2, Bug 825022",
        "name": "",
        "created": "2020-02-12T18:21:41Z"
    },
    "enabled": true,
    "issuerName": "MIGsMT0wOwYDVQQDDDRUw5xSS1RSVVNUIEVsZWt0cm9uaWsgU3VudWN1IFNlcnRpZmlrYXPEsSBIaXptZXRsZXJpMQswCQYDVQQGEwJUUjFeMFwGA1UECgxVVMOcUktUUlVTVCBCaWxnaSDEsGxldGnFn2ltIHZlIEJpbGnFn2ltIEfDvHZlbmxpxJ9pIEhpem1ldGxlcmkgQS7Fni4gKGMpIEthc8SxbSAgMjAwNQ==",
    "serialNumber": "CGQ=",
    "id": "f48493ce-ff35-4488-bcf3-d7346a1141a2",
    "last_modified": 1581628280088
}

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action