OneCRL Entry
f5b7873a-fe31-44a0-b75c-fbbeebfc5a35
Revocation Entry
- Status
- disabled
- Serial
1FA43D72635E7BF38135EEF39CCFC9DDC3477986- Last Modified
- 2024-03-11 20:41:35 UTC
- Schema
- 1709917272813
Issuer
- DN
- C=CN, O=iTrusChina Co.,Ltd., CN=vTrus Root CA
- DN SHA-256
e3eaf406a21c9f1efee61f8f1e7e7969512b9ab13571b67f15ad55736ff36349- Issuer DER
MEMxCzAJBgNVBAYTAkNOMRwwGgYDVQQKExNpVHJ1c0NoaW5hIENvLixMdGQuMRYwFAYDVQQDEw12VHJ1cyBSb290IENB
Context
- Bugzilla
- 1884400
- Action
- Five disabled OneCRL entries, identified by issuer DN and serial number, were proposed by the Common CA Database to OneCRL Bot on 2024-03-08, reviewed by Mozilla staff, approved in Kinto Production by John Schanck on 2024-03-11, and confirmed visible in Firefox Nightly and Beta on 2024-03-12.
- Confidence
- Explicit in OneCRL thread · 0.98
CCADB Link
- Issuer CA
- vTrus Root CA
- CA Owner
- iTrusChina Co., Ltd.
AI Summary
Generated 2026-06-30 11:41 UTC · Model: gpt-5.4Bug 1884400 tracked the addition of five certificate issuer/serial entries to Mozilla OneCRL. The bug was created automatically on 2024-03-08 by the Common CA Database to OneCRL Bot, which stated that the entries were being added based on revoked intermediate certificates reported in the CCADB. The proposed entries covered two serials under vTrus ECC Root CA, two serials under vTrus Root CA, and one serial under IdenTrust Commercial Root CA 1. Ben Wilson confirmed on 2024-03-09 that these were the correct entries to add and said TLS Canary was not needed for this batch. John Schanck later verified staging/preview state and listed the five pending production additions, and Ben Wilson approved production on 2024-03-11. John Schanck then approved the changes in production, and Ben Wilson confirmed on 2024-03-12 that the changes appeared in Nightly and Beta Firefox profiles and at crt.sh's Mozilla OneCRL view. The thread does not state the individual CCADB revocation reasons or dates for the five certificates. The thread also does not explicitly identify any external compliance incident or CA closure as the cause of these revocations.
Five disabled OneCRL entries, identified by issuer DN and serial number, were proposed by the Common CA Database to OneCRL Bot on 2024-03-08, reviewed by Mozilla staff, approved in Kinto Production by John Schanck on 2024-03-11, and confirmed visible in Firefox Nightly and Beta on 2024-03-12.
Explicitly stated as additions based on revoked intermediate certificates reported in the CCADB; no specific revocation reason, revocation date, or candidate-report field state is given in the thread.
unknown
Explicit in OneCRL thread · 0.98
- 2024-03-08CCADB to OneCRL Bot opened Bug 1884400 and said entries were being added based on revoked intermediate certificates reported in the CCADB.
- 2024-03-08Bot attached issuer/serial pairs, proposed OneCRL additions, and decoded entry details.
- 2024-03-09Ben Wilson confirmed these were the correct entries to add and said TLS Canary was not needed.
- 2024-03-10John Schanck posted staging/preview verification output showing five changes waiting in production.
- 2024-03-11Ben Wilson approved proceeding with Kinto Production approval.
- 2024-03-11John Schanck stated that the changes were approved in production.
- 2024-03-12Ben Wilson confirmed the changes appeared in Nightly and Beta Firefox profiles and at crt.sh/mozilla-onecrl.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1709917272813,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1884400",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "MEMxCzAJBgNVBAYTAkNOMRwwGgYDVQQKExNpVHJ1c0NoaW5hIENvLixMdGQuMRYwFAYDVQQDEw12VHJ1cyBSb290IENB",
"serialNumber": "H6Q9cmNee/OBNe7znM/J3cNHeYY=",
"id": "f5b7873a-fe31-44a0-b75c-fbbeebfc5a35",
"last_modified": 1710189695282
}