← OneCRL Browser

OneCRL Entry

f863e679-95a7-4481-a5de-11b1fddd1798

Revocation Entry

Status
disabled
Serial
05E8B34E1C5E228748824311B3C2EB57
Last Modified
2020-11-20 00:45:30 UTC
Schema
1605805277676

Issuer

DN
C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3
DN SHA-256
3772129ef07eec41fc93eeb7786edcbc0dca3aff72f09427773458cddda5c464
Issuer DER
MGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcz

Context

Bugzilla
1678378
Action
ccadb2onercl bot added OneCRL entries for revoked intermediate certificates; the local OneCRL records show the batch was last modified on 2020-11-20T00:45:29Z-00:45:30Z, with STAGE approval at 2020-11-20T00:43:07Z and PROD approval at 2020-11-20T00:45:41Z.
Confidence
Explicit in OneCRL thread · 0.98

CCADB Link

Issuer CA
DigiCert Global Root G3
CA Owner
DigiCert

AI Summary

Generated 2026-06-30 11:41 UTC · Model: gpt-5.4-mini

This bug added a batch of OneCRL entries for revoked intermediate certificates reported in the CCADB. The additions were created by the ccadb2onercl bot and later confirmed by Kathleen Wilson as the correct entries to add. The thread states these revocations had happened a while earlier and had already been added to other root-store equivalents of OneCRL, so no TLS Canary run was needed. The OneCRL records show the entries were disabled and last modified on 2020-11-20T00:45:29Z to 2020-11-20T00:45:30Z. The bug was approved at STAGE at 2020-11-20T00:43:07Z and at PROD at 2020-11-20T00:45:41Z. The thread does not state the specific CCADB revocation fields or the external compliance incident/CA closure for these certificates.

OneCRL action

ccadb2onercl bot added OneCRL entries for revoked intermediate certificates; the local OneCRL records show the batch was last modified on 2020-11-20T00:45:29Z-00:45:30Z, with STAGE approval at 2020-11-20T00:43:07Z and PROD approval at 2020-11-20T00:45:41Z.

CCADB trigger

Explicitly stated only as revoked intermediate certificates reported in the CCADB; specific CCADB fields/candidate-report state not stated.

External cause

Unknown / not stated; the thread only says the revocations happened earlier and were already present in other root-store equivalents of OneCRL.

Confidence

Explicit in OneCRL thread · 0.98

Chronology
  • 2020-11-19ccadb2onercl bot created the bug and attached proposed OneCRL additions based on revoked intermediate certificates reported in the CCADB.
  • 2020-11-20Kathleen Wilson confirmed the entries were correct and said TLS Canary was unnecessary because the revocations were older and already in other root-store equivalents.
  • 2020-11-20The change was approved at STAGE.
  • 2020-11-20The change was approved at PROD.
  • 2021-04-15Bug was moved to Core::Security Block-lists, Allow-lists, and other State.
Bug 1678378

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

OneCRL entries for this Bugzilla case

45 entries
Status Name Issuer Serial CCADB Modified
disabled — C=CH, O=WISeKey, OU=Copyright (c) 2005, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GA CA 6106E076000000000004 OISTE WISeKey Global Root GA CA
OISTE
 2020-11-20
disabled — C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3 1AF6D97A8FF0B28DEEAC01A524C87A6F32E79DF6 QuoVadis Root CA 3
DigiCert
 2020-11-20
disabled — OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign 75A8B9B5231B9F950AED62BAFB467147 GlobalSign
GlobalSign nv-sa
 2020-11-20
disabled — C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA 0682FB1F817776A579912C3ED910EFF1 DigiCert Assured ID Root CA
DigiCert
 2020-11-20
disabled — C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3 05FF2105A52DEFA92EE800792A815D90 DigiCert Global Root G3
DigiCert
 2020-11-20
disabled — C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Domein Server CA 2020 0C71B917B97E276D3B444A97E8FD76F5D0A63356 Staat der Nederlanden Domein Server CA 2020
Government of The Netherlands, PKIoverheid (Logius)
 2020-11-20
disabled — C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 1 G3 749E30FC6C0FD3C59E91B5085EF613B10ACEF9AF QuoVadis Root CA 1 G3
DigiCert
 2020-11-20
disabled — C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3 0F9267020F5A75B766E436ACD0D85904 DigiCert Global Root G3
DigiCert
 2020-11-20
disabled — C=CH, O=WISeKey, OU=Copyright (c) 2005, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GA CA 1824B86900000000000B OISTE WISeKey Global Root GA CA
OISTE
 2020-11-20
disabled — C=CH, O=WISeKey, OU=Copyright (c) 2005, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GA CA 43230BA4000000000006 OISTE WISeKey Global Root GA CA
OISTE
 2020-11-20
disabled — C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 77E7AB7FB051088619A08ED6C0CB7FEABCE92416 QuoVadis Root CA 2
DigiCert
 2020-11-20
disabled — OU=GlobalSign Root CA - R6, O=GlobalSign, CN=GlobalSign 48A402DDB5DEFD50ACCFC0FCF13F GlobalSign
GlobalSign nv-sa
 2020-11-20
disabled — C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2 02C1894869D45029EB38381A75BB6167 DigiCert Global Root G2
DigiCert
 2020-11-20
disabled — C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2 06675485BAD8ED9208DB3CB26C501A13 DigiCert Global Root G2
DigiCert
 2020-11-20
disabled — C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root 0C2CE0C12D5A9E0CC945E0AFED771A96 Baltimore CyberTrust Root
DigiCert
 2020-11-20
disabled — C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 4DB89836333B16BC441D5F4FC60BC67DCFF0BD28 QuoVadis Root CA 2
DigiCert
 2020-11-20
disabled — C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 G3 38354514E8735D6BD19081A1A8D2F73F80704D10 QuoVadis Root CA 2 G3
DigiCert
 2020-11-20
disabled — C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3 0F2EEBED12E66F13C473F33FFA76D50B DigiCert Global Root G3
DigiCert
 2020-11-20
disabled — C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 4DE601099CB477F4CF70027A14DE8CDB4A8D24A7 QuoVadis Root CA 2
DigiCert
 2020-11-20
disabled — C=BM, O=QuoVadis Limited, CN=QuoVadis Enterprise Trust CA 2 G3 4984B32BA495D0C61DE34BCF14D3A35AEE508644 QuoVadis Enterprise Trust CA 2 G3
DigiCert
 2020-11-20
disabled — C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3 05E8B34E1C5E228748824311B3C2EB57 DigiCert Global Root G3
DigiCert
 2020-11-20
disabled — C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3 G3 454304F0E63F6011F2A246E0C684CAA4F7288876 QuoVadis Root CA 3 G3
DigiCert
 2020-11-20
disabled — C=BM, O=QuoVadis Limited, CN=QuoVadis Enterprise Trust CA 2 G3 3DD416FF802F230A52CCBD61DF49B28608E77E7A QuoVadis Enterprise Trust CA 2 G3
DigiCert
 2020-11-20
disabled — C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Domein Server CA 2020 1070E8640DC2957E4226EE4629DBD75199FE1EBE Staat der Nederlanden Domein Server CA 2020
Government of The Netherlands, PKIoverheid (Logius)
 2020-11-20
disabled — C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root 0D711C842FE9D67E9DCC22A21CB65CDF Baltimore CyberTrust Root
DigiCert
 2020-11-20
disabled — C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden EV Root CA 1E535AFF7FFA767344A85B524AD9D0297D5DBA65 Staat der Nederlanden EV Root CA
Government of The Netherlands, PKIoverheid (Logius)
 2020-11-20
disabled — C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2 0A06455A8547F16E099A368464894E64 DigiCert Global Root G2
DigiCert
 2020-11-20
disabled — C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 61542967FADC0200984399A02C8591AE0985E586 QuoVadis Root CA 2
DigiCert
 2020-11-20
disabled — C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 6FA3CC76E393D62826D9BE57AD26CDD5AC91603D QuoVadis Root CA 2
DigiCert
 2020-11-20
disabled — OU=GlobalSign Root CA - R6, O=GlobalSign, CN=GlobalSign 751E3EE8F0EED3FB49BC1D2DFAAD938F GlobalSign
GlobalSign nv-sa
 2020-11-20
disabled — C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA 064A1DBA8329AD05114EE0D8EA98BE7C DigiCert Assured ID Root CA
DigiCert
 2020-11-20
disabled — C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA 0F16834F829191E32AFF7B2939B79A52 DigiCert Global Root CA
DigiCert
 2020-11-20
disabled — OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign 01E9D89F6606F537E76F4D8BF7 GlobalSign
GlobalSign nv-sa
 2020-11-20
disabled — OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign 01E9D89F70D7650AF23B835674 GlobalSign
GlobalSign nv-sa
 2020-11-20
disabled — OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign 751E3EECA4A059CCEF82A888148F76D9 GlobalSign
GlobalSign nv-sa
 2020-11-20
disabled — C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority 760BDB66C0C72C1590385851C8835F226DBCF063 QuoVadis Root Certification Authority
DigiCert
 2020-11-20
disabled — C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root 042B218922773474328A44BF6D5DEE3D Baltimore CyberTrust Root
DigiCert
 2020-11-20
disabled — C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Domein Server CA 2020 7AB130A2ADE85DE546DCE3E34CABC837B1F725D4 Staat der Nederlanden Domein Server CA 2020
Government of The Netherlands, PKIoverheid (Logius)
 2020-11-20
disabled — C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 1F86036F4B8800C7549CDC8F47FA5B7B704F9525 QuoVadis Root CA 2
DigiCert
 2020-11-20
disabled — OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign 04000000000136E982395D GlobalSign
GlobalSign nv-sa
 2020-11-20
disabled — C=CH, O=WISeKey, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GB CA 3300000016CDFF1900555458B7000000000016 OISTE WISeKey Global Root GB CA
OISTE
 2020-11-20
disabled — C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2 0AF65CBE71A6105412936C42C2189BA7 DigiCert Global Root G2
DigiCert
 2020-11-20
disabled — C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA 04000000000136E93A3AB3 GlobalSign Root CA
GlobalSign nv-sa
 2020-11-20
disabled — C=US, O=IdenTrust, CN=IdenTrust Public Sector Root CA 1 0A0142800000015125D7736100000002 IdenTrust Public Sector Root CA 1
IdenTrust Services, LLC
 2020-11-20
disabled — C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3 02449A7487C7CDB9B7548E2BEC6B1FCA DigiCert Global Root G3
DigiCert
 2020-11-20

Raw Remote Settings Record

{
    "schema": 1605805277676,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1678378",
        "who": "",
        "why": "",
        "name": "",
        "created": ""
    },
    "enabled": false,
    "issuerName": "MGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcz",
    "serialNumber": "BeizThxeIodIgkMRs8LrVw==",
    "id": "f863e679-95a7-4481-a5de-11b1fddd1798",
    "last_modified": 1605833130177
}

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

⚠

Confirm action