OneCRL Entry
fbd21948-1fb9-42e2-a7cf-9dd3a9c66832
Revocation Entry
- Status
- disabled
- Serial
2B00373C198A3E45D360C6E2C3F37ED9- Last Modified
- 2026-03-26 20:16:39 UTC
- Schema
- 1773334942292
Issuer
- DN
- C=CN, O=UniTrust, CN=UniTrust Global TLS RSA Root CA R1
- DN SHA-256
e1ad479e5dcc921515736a657682e223ca03d2c181da72f677065e55cd2a90ec- Issuer DER
ME0xCzAJBgNVBAYTAkNOMREwDwYDVQQKEwhVbmlUcnVzdDErMCkGA1UEAxMiVW5pVHJ1c3QgR2xvYmFsIFRMUyBSU0EgUm9vdCBDQSBSMQ==
Context
- Bugzilla
- 2022912
- Action
- On 2026-03-12, the ccadb2onercl bot added 6 disabled OneCRL entries for UniTrust issuer/serial pairs; Ben Wilson verified them on 2026-03-25, and they were approved into production on 2026-03-26.
- Confidence
- Explicit in OneCRL thread · 0.96
CCADB Link
AI Summary
Generated 2026-06-30 10:50 UTC · Model: gpt-5.4-miniThis bug added 6 OneCRL entries for revoked UniTrust intermediate certificates, all tied to the issuer/serial pairs verified by Ben Wilson. The additions were initiated by the CCADB-to-OneCRL bot on 2026-03-12, which said it was adding entries based on revoked intermediate certificates reported in CCADB. The bot created the line-delimited issuer/serial attachment and the proposed OneCRL attachment, and the entries were later approved in stage and then in production. The OneCRL records show the affected issuers as UniTrust Global TLS RSA Root CA R1 and UniTrust Global TLS ECC Root CA R2, with all 6 entries disabled in the published state. The thread does not state the specific CCADB revocation field values, candidate-report state, or the underlying compliance incident that caused the revocations. Timeline-wise, the bot opened the bug on 2026-03-12, stage approval occurred on 2026-03-25, production approval on 2026-03-26, and the bug was closed on 2026-03-27 after the entries appeared in Firefox profiles.
On 2026-03-12, the ccadb2onercl bot added 6 disabled OneCRL entries for UniTrust issuer/serial pairs; Ben Wilson verified them on 2026-03-25, and they were approved into production on 2026-03-26.
Revoked intermediate certificates reported in CCADB; specific revocation fields, candidate-report state, and revocation date are not stated.
Unknown / not stated
Explicit in OneCRL thread · 0.96
- 2026-03-12ccadb2onercl bot opened Bug 2022912 and announced OneCRL additions based on revoked intermediate certificates reported in CCADB.
- 2026-03-12Bot created the issuer/serial attachment and proposed OneCRL attachment.
- 2026-03-25Ben Wilson verified the six issuer-serial pairs and marked them correct for OneCRL.
- 2026-03-25Stage approval was granted for the changes.
- 2026-03-26Production approval was granted for the changes.
- 2026-03-27Ben Wilson said the entries were in his Firefox profiles and the bug could be closed.
AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.
Raw Remote Settings Record
{
"schema": 1773334942292,
"details": {
"bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=2022912",
"who": "",
"why": "",
"name": "",
"created": ""
},
"enabled": false,
"issuerName": "ME0xCzAJBgNVBAYTAkNOMREwDwYDVQQKEwhVbmlUcnVzdDErMCkGA1UEAxMiVW5pVHJ1c3QgR2xvYmFsIFRMUyBSU0EgUm9vdCBDQSBSMQ==",
"serialNumber": "KwA3PBmKPkXTYMbiw/N+2Q==",
"id": "fbd21948-1fb9-42e2-a7cf-9dd3a9c66832",
"last_modified": 1774556199382
}