← OneCRL Browser

Revoked intermediates

f7582bc8-dbdb-37dd-b24c-418242bbc4e0

Revocation Entry

Status: enabled
Serial: 022EDC04962A044D08F4D772A197D1AF
Last Modified: 2016-11-28 16:06:01 UTC
Schema: 1552493034992

Issuer

DN: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
DN SHA-256: 8ce002a5fcc98cc7808febf0a513551f2a6aa60b2e42408005ab0d16aa261203
Issuer DER: MIG9MQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAyMDA4IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxODA2BgNVBAMTL1ZlcmlTaWduIFVuaXZlcnNhbCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5

Context

Bugzilla: 1312150
Action: A large set of revoked intermediate certificates was added to OneCRL/AMO blocklist by Mozilla staff: Mark Goodwin initiated the request on 2016-10-22, Andrew Williamson requested the import procedure on 2016-10-27, and John Thomas ran it on stage and then on production on 2016-10-27.
Confidence: Explicit in OneCRL thread · 0.96

CCADB Link

Issuer CA: VeriSign Universal Root Certification Authority
CA Owner: DigiCert

AI Summary

Generated 2026-06-30 11:48 UTC · Model: gpt-5.4-mini

This bug added a batch of revoked intermediate certificates to Mozilla’s OneCRL/AMO blocklist to clear most of the backlog of revoked intermediates. The request was initiated by Mark Goodwin on 2016-10-22, who attached the blocklist entries and asked for approval to add them. Kathleen Wilson explicitly confirmed that each entry corresponded to a revoked intermediate certificate that should be added to OneCRL. Andrew Williamson then requested the production import via a django console snippet, and John Thomas reported the change was run on stage and then completed on production on 2016-10-27. The local OneCRL records show many entries with detail_name “Revoked intermediates,” but the thread does not state a specific CCADB revocation field or candidate-report state for qualification beyond the fact that they were revoked intermediates. The thread also does not identify a single external compliance incident or CA closure explaining the revocations; the bug summary only says the CCADB entries were generated on 2016-10-21.

OneCRL action

A large set of revoked intermediate certificates was added to OneCRL/AMO blocklist by Mozilla staff: Mark Goodwin initiated the request on 2016-10-22, Andrew Williamson requested the import procedure on 2016-10-27, and John Thomas ran it on stage and then on production on 2016-10-27.

CCADB trigger

Explicitly stated only as revoked intermediates / OneCRL blocklist entries; no specific CCADB revocation field or candidate-report state is named in the thread.

External cause

Unknown / not stated; no specific compliance incident, root program report, m.d.s.p. thread, or CA closure is identified in the bug.

Confidence

Explicit in OneCRL thread · 0.96

Chronology

2016-10-21CCADB entries were generated, per bug summary.
2016-10-22Mark Goodwin filed the bug and attached blocklist entries for addition to the AMO cert blocklist.
2016-10-25Kathleen Wilson confirmed the entries corresponded to revoked intermediate certificates that should be added to OneCRL.
2016-10-26Canary testing reported no compatibility errors for the blocklisted items.
2016-10-27Andrew Williamson requested the production import via django console.
2016-10-27John Thomas reported the import worked on stage and then completed it on production.
2016-11-28Local OneCRL records show the entries last modified in OneCRL metadata.

Bug 1312150

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Status	Name	Issuer	Serial	CCADB	Modified
enabled	Revoked intermediates	C=FR, O=Certplus, CN=Class 2 Primary CA	`1120D85CD06117E75E3C58E88ECEEEDAF8F5`	Class 2 Primary CA DocuSign (OpenTrust/Keynectis)	2016-11-28
enabled	Revoked intermediates	O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)	`4C0E818C`	Entrust.net Certification Authority (2048) Sectigo	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`17A42507FC97F8`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`072771A2`	Baltimore CyberTrust Root DigiCert	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`0AA9DB15`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Hardware	`5EBAF7D511740E823330A5D2E97B43FA`	UTN-USERFirst-Hardware Sectigo	2016-11-28
enabled	Revoked intermediates	C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority	`421FD29D`	QuoVadis Root Certification Authority DigiCert	2016-11-28
enabled	Revoked intermediates	C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2011	`0100000000`	Hellenic Academic and Research Institutions RootCA 2011 HARICA	2016-11-28
enabled	Revoked intermediates	C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA	`224763DF36175C6B02FC07E6F53BF1FA`	thawte Primary Root CA DigiCert	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`179060FC2F1E5E`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=DE, O=Deutsche Telekom AG, OU=T-TeleSec Trust Center, CN=Deutsche Telekom Root CA 2	`0089901115583E879B`	Deutsche Telekom Root CA 2 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=BE, O=GlobalSign nv-sa, OU=Primary Class 1 CA, CN=GlobalSign Primary Class 1 CA	`0400000000011E44A5E5AA`	GlobalSign Primary Class 1 CA GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2011	`18DD87AE1F4BB66B`	Hellenic Academic and Research Institutions RootCA 2011 HARICA	2016-11-28
enabled	Revoked intermediates	C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority	`421FD06D`	QuoVadis Root Certification Authority DigiCert	2016-11-28
enabled	Revoked intermediates	C=FR, O=Certplus, CN=Class 2 Primary CA	`1120723496794CF8E0F626722FA6BF879671`	Class 2 Primary CA DocuSign (OpenTrust/Keynectis)	2016-11-28
enabled	Revoked intermediates	C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA	`040000000001154B5AC5A7`	GlobalSign Root CA GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Burger CA - G2	`0131377B`	Staat der Nederlanden Burger CA - G2 Government of The Netherlands, PKIoverheid (Logius)	2016-11-28
enabled	Revoked intermediates	OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign	`040000000001220D3C0F75`	GlobalSign Google Trust Services LLC	2016-11-28
enabled	Revoked intermediates	O=Digital Signature Trust Co., CN=DST Root CA X3	`0A014142000001415C7FF11500000002`	DST Root CA X3 IdenTrust Services, LLC	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`09C2FE10`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=CH, O=WISeKey, OU=Copyright (c) 2005 WISeKey SA, OU=International, CN=WISeKey CertifyID Advanced G1 CA	`583D40C9000000000025`	WISeKey CertifyID Advanced G1 CA OISTE	2016-11-28
enabled	Revoked intermediates	C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2011	`18DD87AE1F4BB672`	Hellenic Academic and Research Institutions RootCA 2011 HARICA	2016-11-28
enabled	Revoked intermediates	OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign	`04000000000125071044D5`	GlobalSign GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA	`0400000000011E44A5E404`	GlobalSign Root CA GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`072790F6`	Baltimore CyberTrust Root DigiCert	2016-11-28
enabled	Revoked intermediates	C=US, O=SecureTrust Corporation, CN=SecureTrust CA	`47869FE4`	SecureTrust CA SSL.com	2016-11-28
enabled	Revoked intermediates	C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root	`46EAF096054CC5E3FA65EA6E9F42C664`	AddTrust External CA Root Sectigo	2016-11-28
enabled	Revoked intermediates	C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden EV Root CA	`0098969A`	Staat der Nederlanden EV Root CA Government of The Netherlands, PKIoverheid (Logius)	2016-11-28
enabled	Revoked intermediates	C=FR, O=Certplus, CN=Class 2 Primary CA	`11208B455BA171465A96E220215951271F8E`	Class 2 Primary CA DocuSign (OpenTrust/Keynectis)	2016-11-28
enabled	Revoked intermediates	C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2011	`18DD87AE1F4BB66E`	Hellenic Academic and Research Institutions RootCA 2011 HARICA	2016-11-28
enabled	Revoked intermediates	C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority	`7CC4D16C60A9DBCD299F213FBB9DF36C`	VeriSign Universal Root Certification Authority DigiCert	2016-11-28
enabled	Revoked intermediates	C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root	`3ACDAB9C759886BCAF74E5DF81A9F4E8`	AddTrust External CA Root Sectigo	2016-11-28
enabled	Revoked intermediates	C=FR, O=Certplus, CN=Class 2 Primary CA	`11206AA082E8F749ED0D6ECE4CAE37312D85`	Class 2 Primary CA DocuSign (OpenTrust/Keynectis)	2016-11-28
enabled	Revoked intermediates	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`07276BD1`	Baltimore CyberTrust Root DigiCert	2016-11-28
enabled	Revoked intermediates	C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority	`5DB7AFAF7BADDD9F66D46B970BD4A89C`	VeriSign Universal Root Certification Authority DigiCert	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`09E6A01D`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`10076668`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	CN=GlobalSign RootSign Partners CA, OU=RootSign Partners CA, O=GlobalSign nv-sa, C=BE	`04000000000116AA006682`	GlobalSign RootSign Partners CA GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`09E154DB`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`179061134CDB81`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=JP, O=JIPDEC, OU=JCAN Sub Root CA0, CN=JCAN Sub Root CA0	`0400000000012F4EE15018`	JCAN Sub Root CA0 GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=FR, O=Certplus, CN=Class 2 Primary CA	`1120B21D4FB13840A787D45FD88BE047CCD2`	Class 2 Primary CA DocuSign (OpenTrust/Keynectis)	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`09D58537`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G3	`4EB2843216F63CA92D1FC947834015E4`	VeriSign Class 3 Public Primary Certification Authority - G3 DigiCert	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`09F93D97`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=BE, O=GlobalSign nv-sa, OU=Primary Class 3 CA, CN=GlobalSign Primary Class 3 CA	`0400000000011E44A5EA6C`	GlobalSign Primary Class 3 CA GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`072769D2`	Baltimore CyberTrust Root DigiCert	2016-11-28
enabled	Revoked intermediates	C=US, OU=www.xrampsecurity.com, O=XRamp Security Services Inc, CN=XRamp Global Certification Authority	`4190ABBD`	XRamp Global Certification Authority SSL.com	2016-11-28
enabled	Revoked intermediates	C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2011	`0100000002`	Hellenic Academic and Research Institutions RootCA 2011 HARICA	2016-11-28
enabled	Revoked intermediates	C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority	`030D523C2E7AE7DDD9099F6F08D1CAC1`	VeriSign Universal Root Certification Authority DigiCert	2016-11-28
enabled	Revoked intermediates	C=JP, O=JIPDEC, OU=JCAN Sub Root CA0, CN=JCAN Sub Root CA0	`0400000000012BCE328ECF`	JCAN Sub Root CA0 GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2011	`14997AB5780DA529`	Hellenic Academic and Research Institutions RootCA 2011 HARICA	2016-11-28
enabled	Revoked intermediates	CN=Atos TrustedRoot 2011, O=Atos, C=DE	`33455239EC16DD62`	Atos TrustedRoot 2011 Atos	2016-11-28
enabled	Revoked intermediates	C=CN, O=CNNIC, CN=CNNIC ROOT	`4933007A`	CNNIC ROOT China Internet Network Information Center (CNNIC)	2016-11-28
enabled	Revoked intermediates	C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN - DATACorp SGC	`130D5E7BD26AED0FC38A0DC0085E15E9`	UTN - DATACorp SGC Sectigo	2016-11-28
enabled	Revoked intermediates	C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object	`26AEA381E029893F4EE16D93C7F35345`	UTN-USERFirst-Object Sectigo	2016-11-28
enabled	Revoked intermediates	C=BE, O=GlobalSign nv-sa, OU=Primary Class 2 CA, CN=GlobalSign Primary Class 2 CA	`0400000000011E44A5E82A`	GlobalSign Primary Class 2 CA GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=FR, O=Certplus, CN=Class 2 Primary CA	`1120FD621CC810EC22393ECDC22A7E135288`	Class 2 Primary CA DocuSign (OpenTrust/Keynectis)	2016-11-28
enabled	Revoked intermediates	C=FR, O=Certplus, CN=Class 2 Primary CA	`112082F683CD71174F3A8C7E4A35A6F5D4D7`	Class 2 Primary CA DocuSign (OpenTrust/Keynectis)	2016-11-28
enabled	Revoked intermediates	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2	`10CF1B0CB0679E861EE0B9D6A4B2214B87ACAF72`	QuoVadis Root CA 2 DigiCert	2016-11-28
enabled	Revoked intermediates	C=US, O=SecureTrust Corporation, CN=SecureTrust CA	`00DCA0AC8B48276ADC2A5C92DCBB9ED3B5`	SecureTrust CA SSL.com	2016-11-28
enabled	Revoked intermediates	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`07275E1A`	Baltimore CyberTrust Root DigiCert	2016-11-28
enabled	Revoked intermediates	C=FR, O=Certplus, CN=Class 2 Primary CA	`112095A29F90E3F38182D7F858992BD351A1`	Class 2 Primary CA DocuSign (OpenTrust/Keynectis)	2016-11-28
enabled	Revoked intermediates	C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority	`54B9B75DEEB4FB56203E95C21AD5CB9E`	VeriSign Universal Root Certification Authority DigiCert	2016-11-28
enabled	Revoked intermediates	C=FR, O=Certplus, CN=Class 2 Primary CA	`1120A2B39EBDA26ADB6F6D32C92177F7E684`	Class 2 Primary CA DocuSign (OpenTrust/Keynectis)	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`179060E82DB7ED`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`0AC92BB8`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	CN=Atos TrustedRoot 2011, O=Atos, C=DE	`6B5D91BC1361CE75`	Atos TrustedRoot 2011 Atos	2016-11-28
enabled	Revoked intermediates	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3	`0A33`	QuoVadis Root CA 3 DigiCert	2016-11-28
enabled	Revoked intermediates	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3	`35381FE22C087DEC893C8A26C36770497130B714`	QuoVadis Root CA 3 DigiCert	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`09DFDDBA`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=EE, O=AS Sertifitseerimiskeskus, CN=EE Certification Centre Root CA, emailAddress=pki@sk.ee	`33AE19E6E7D9CC34554C7909475B97CF`	EE Certification Centre Root CA SK ID Solutions AS	2016-11-28
enabled	Revoked intermediates	C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA	`0400000000012019C18D68`	GlobalSign Root CA GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`0C79A66B`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`09C1C2FE`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	CN=GlobalSign RootSign Partners CA, OU=RootSign Partners CA, O=GlobalSign nv-sa, C=BE	`0400000000012C5E7F1D76`	GlobalSign RootSign Partners CA GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2	`0570`	QuoVadis Root CA 2 DigiCert	2016-11-28
enabled	Revoked intermediates	OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign	`04000000000127FBF76700`	GlobalSign Google Trust Services LLC	2016-11-28
enabled	Revoked intermediates	O=Cybertrust, Inc, CN=Cybertrust Global Root	`04000000000126943401B0`	Cybertrust Global Root DigiCert	2016-11-28
enabled	Revoked intermediates	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`0727C793`	Baltimore CyberTrust Root DigiCert	2016-11-28
enabled	Revoked intermediates	C=FR, O=Certplus, CN=Class 2 Primary CA	`1120BC0DAC1646203210C777F145DB7E03D1`	Class 2 Primary CA DocuSign (OpenTrust/Keynectis)	2016-11-28
enabled	Revoked intermediates	C=JP, O=JIPDEC, OU=JCAN Sub Root CA0, CN=JCAN Sub Root CA0	`0400000000012BCE3291CD`	JCAN Sub Root CA0 GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2011	`18DD87AE1F4BB673`	Hellenic Academic and Research Institutions RootCA 2011 HARICA	2016-11-28
enabled	Revoked intermediates	C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2011	`14997AB5780DA528`	Hellenic Academic and Research Institutions RootCA 2011 HARICA	2016-11-28
enabled	Revoked intermediates	C=FR, O=Certplus, CN=Class 2 Primary CA	`1120C8B57E2BB9688B9EB973D2B938FDB9B3`	Class 2 Primary CA DocuSign (OpenTrust/Keynectis)	2016-11-28
enabled	Revoked intermediates	CN=GlobalSign RootSign Partners CA, OU=RootSign Partners CA, O=GlobalSign nv-sa, C=BE	`04000000000133A777674B`	GlobalSign RootSign Partners CA GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`17906110D3DF57`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=FR, O=Certplus, CN=Class 2 Primary CA	`112212B81A3FC1D5B6B41CED2A61DD142173`	Class 2 Primary CA DocuSign (OpenTrust/Keynectis)	2016-11-28
enabled	Revoked intermediates	C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5	`6EE44E2FF9761AE5C84AFFBF2552E474`	VeriSign Class 3 Public Primary Certification Authority - G5 DigiCert	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`09F93DA0`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=US, O=GeoTrust Inc., CN=GeoTrust Primary Certification Authority	`2322156B31B8444F4011191BF9E907F3`	GeoTrust Primary Certification Authority DigiCert	2016-11-28
enabled	Revoked intermediates	C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority	`022EDC04962A044D08F4D772A197D1AF`	VeriSign Universal Root Certification Authority DigiCert	2016-11-28
enabled	Revoked intermediates	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`07273AF2`	Baltimore CyberTrust Root DigiCert	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`0B2AF53C`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`179060F84CE241`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign	`040000000001100B8CA11B`	GlobalSign Google Trust Services LLC	2016-11-28
enabled	Revoked intermediates	C=FR, O=Certplus, CN=Class 2 Primary CA	`1120EEDA78652CFCDFC7E2D882395814FFE4`	Class 2 Primary CA DocuSign (OpenTrust/Keynectis)	2016-11-28
enabled	Revoked intermediates	C=US, O=Wells Fargo WellsSecure, OU=Wells Fargo Bank NA, CN=WellsSecure Public Root Certificate Authority	`03`	WellsSecure Public Root Certificate Authority Wells Fargo Bank N.A.	2016-11-28
enabled	Revoked intermediates	OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign	`0400000000013189C646EC`	GlobalSign GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`07277972`	Baltimore CyberTrust Root DigiCert	2016-11-28
enabled	Revoked intermediates	C=FR, O=Certplus, CN=Class 2 Primary CA	`112249C1E5813E1A1701A07D73C487C08E0E`	Class 2 Primary CA DocuSign (OpenTrust/Keynectis)	2016-11-28
enabled	Revoked intermediates	C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Organisatie CA - G2	`2D345C0C769B4475`	Staat der Nederlanden Organisatie CA - G2 Government of The Netherlands, PKIoverheid (Logius)	2016-11-28
enabled	Revoked intermediates	CN=GlobalSign RootSign Partners CA, OU=RootSign Partners CA, O=GlobalSign nv-sa, C=BE	`0400000000011E4487922D`	GlobalSign RootSign Partners CA GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`09BB2C77`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`09C1C2D7`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=FR, O=Certplus, CN=Class 2 Primary CA	`0E322F0645FE10255B07F0B78BAC361A`	Class 2 Primary CA DocuSign (OpenTrust/Keynectis)	2016-11-28
enabled	Revoked intermediates	C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Aristotle University of Thessaloniki Central CA R4	`12AB612CA7548302`	Aristotle University of Thessaloniki Central CA R4 HARICA	2016-11-28
enabled	Revoked intermediates	C=US, OU=www.xrampsecurity.com, O=XRamp Security Services Inc, CN=XRamp Global Certification Authority	`4190ABBC`	XRamp Global Certification Authority SSL.com	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`0AA2FB08`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2011	`18DD87AE1F4BB670`	Hellenic Academic and Research Institutions RootCA 2011 HARICA	2016-11-28
enabled	Revoked intermediates	C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2011	`0100000005`	Hellenic Academic and Research Institutions RootCA 2011 HARICA	2016-11-28
enabled	Revoked intermediates	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3	`0926`	QuoVadis Root CA 3 DigiCert	2016-11-28
enabled	Revoked intermediates	C=JP, O=JIPDEC, OU=JCAN Sub Root CA0, CN=JCAN Sub Root CA0	`0400000000012F4EE14DC6`	JCAN Sub Root CA0 GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=TW, O=Chunghwa Telecom Co., Ltd., OU=ePKI Root Certification Authority	`2FBB60B3F5BCE6F9E157B23BA89E8DFE`	ePKI Root Certification Authority Chunghwa Telecom	2016-11-28
enabled	Revoked intermediates	C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01	`09F93DAA`	DFN-Verein PCA Global - G01 Deutsche Telekom Security GmbH	2016-11-28
enabled	Revoked intermediates	C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2011	`0100000003`	Hellenic Academic and Research Institutions RootCA 2011 HARICA	2016-11-28
enabled	Revoked intermediates	C=FR, O=Certplus, CN=Class 2 Primary CA	`1120325BF257DFE859229E381003255D4D9B`	Class 2 Primary CA DocuSign (OpenTrust/Keynectis)	2016-11-28
enabled	Revoked intermediates	C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2011	`0100000004`	Hellenic Academic and Research Institutions RootCA 2011 HARICA	2016-11-28
enabled	Revoked intermediates	C=FR, O=Certplus, CN=Class 2 Primary CA	`11207260DB4021F8B37F62F734CCC21FCCD9`	Class 2 Primary CA DocuSign (OpenTrust/Keynectis)	2016-11-28
enabled	Revoked intermediates	C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority	`058386BC6DF6BA46F56318F6A0AA05CB`	VeriSign Universal Root Certification Authority DigiCert	2016-11-28
enabled	Revoked intermediates	C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Client Authentication and Email	`0FFC19EFE9B532FF1238D48415CB3BDF`	UTN-USERFirst-Client Authentication and Email Sectigo	2016-11-28
enabled	Revoked intermediates	C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority	`791D67504CFC93E9C34810FE6DBE6E21`	VeriSign Universal Root Certification Authority DigiCert	2016-11-28
enabled	Revoked intermediates	C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA	`0400000000012945C3A80F`	GlobalSign Root CA GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA	`0400000000012C5E7F1A88`	GlobalSign Root CA GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3	`0925`	QuoVadis Root CA 3 DigiCert	2016-11-28
enabled	Revoked intermediates	C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root	`537B76564F297F14DC6943E922AD2C79`	AddTrust External CA Root Sectigo	2016-11-28
enabled	Revoked intermediates	C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G3	`5383F5B54A3197F5E4CED9551DDB5D83`	VeriSign Class 3 Public Primary Certification Authority - G3 DigiCert	2016-11-28
enabled	Revoked intermediates	C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Hardware	`104A44452AF264531A81BB0DC3F5A859`	UTN-USERFirst-Hardware Sectigo	2016-11-28
enabled	Revoked intermediates	OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign	`04000000000125071040DD`	GlobalSign GlobalSign nv-sa	2016-11-28
enabled	Revoked intermediates	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`07274A92`	Baltimore CyberTrust Root DigiCert	2016-11-28
enabled	Revoked intermediates	C=FR, O=Certplus, CN=Class 2 Primary CA	`11208451BB610EEAC18C9C34FE1FC57EE358`	Class 2 Primary CA DocuSign (OpenTrust/Keynectis)	2016-11-28
enabled	Revoked intermediates	C=US, O=SecureTrust Corporation, CN=Secure Global CA	`4D7C6D01`	Secure Global CA SSL.com	2016-11-28

Raw Remote Settings Record

{
    "schema": 1552493034992,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1312150",
        "who": ".",
        "why": ".",
        "name": "Revoked intermediates",
        "created": "2016-10-27T17:52:12Z"
    },
    "enabled": true,
    "issuerName": "MIG9MQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAyMDA4IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxODA2BgNVBAMTL1ZlcmlTaWduIFVuaXZlcnNhbCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5",
    "serialNumber": "Ai7cBJYqBE0I9NdyoZfRrw==",
    "id": "f7582bc8-dbdb-37dd-b24c-418242bbc4e0",
    "last_modified": 1480349161443
}