← OneCRL Browser

OneCRL Entry

fead3048-84a5-4256-9850-cf412c8cce88

Revocation Entry

Status: enabled
Serial: 0727BDCE
Last Modified: 2018-01-23 13:41:23 UTC
Schema: 1552493004389

Issuer

DN: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
DN SHA-256: 13602ee62a7fef6f43a219d1e4b84ef96c9df8593dc963b62d498627af7def9d
Issuer DER: MFoxCzAJBgNVBAYTAklFMRIwEAYDVQQKEwlCYWx0aW1vcmUxEzARBgNVBAsTCkN5YmVyVHJ1c3QxIjAgBgNVBAMTGUJhbHRpbW9yZSBDeWJlclRydXN0IFJvb3Q=

Context

Bugzilla: 1432467
Action: Four revocation entries were prepared from CCADB-generated data on 2018-01-23T13:41:18Z for addition to OneCRL in bug 1432467. The local entry page explicitly shows three enabled OneCRL records under issuer "C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root" with serials 0727BDCE, 072796C8, and 0727BDCF, created at that time. JC stated "Signed, pushed to OneCRL" on 2018-01-30, and Kathleen Wilson confirmed on 2018-01-31 that the entries had been added.
Confidence: Explicit in OneCRL thread · 0.94

CCADB Link

Issuer CA: Baltimore CyberTrust Root
CA Owner: DigiCert

AI Summary

Generated 2026-06-30 11:48 UTC · Model: gpt-5.4

Bug 1432467 is the public Mozilla OneCRL case for adding four revocation entries generated from CCADB data on 2018-01-23. The local OneCRL entry page shows three enabled records under the issuer "Baltimore CyberTrust Root" with serials 0727BDCE, 072796C8, and 0727BDCF, all created at 2018-01-23T13:41:18Z and tied to this bug. The bug comments state that this set of additions also includes the entry from bug 1427034, making four total additions in the batch. Kathleen Wilson explicitly confirmed that one entry related to bug 1427034 and that the other three qualified because their CCADB OneCRL Status was "Ready To Add" after she verified their revocations via the corresponding CRLs. After review, JC signed and pushed the changes to OneCRL on 2018-01-30, and Kathleen later confirmed the entries had been added. The thread also records a TLS Canary hit for surveys.intesasanpaolo.com and a statement that the impact was expected because Mozilla was distrusting its root. The thread does not explicitly state the revocation reason codes or revocation dates for the three Baltimore-issued entries.

OneCRL action

Four revocation entries were prepared from CCADB-generated data on 2018-01-23T13:41:18Z for addition to OneCRL in bug 1432467. The local entry page explicitly shows three enabled OneCRL records under issuer "C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root" with serials 0727BDCE, 072796C8, and 0727BDCF, created at that time. JC stated "Signed, pushed to OneCRL" on 2018-01-30, and Kathleen Wilson confirmed on 2018-01-31 that the entries had been added.

CCADB trigger

Explicitly stated: one entry was included from bug 1427034, and the other three had CCADB OneCRL Status of "Ready To Add" because Kathleen Wilson verified their revocations via the corresponding CRLs. Revocation reason codes and revocation dates were not stated in this thread.

External cause

The thread explicitly states that one affected site was expected because Mozilla was distrusting its root. A DigiCert customer site, https://surveys.intesasanpaolo.com/, was discussed in that context, but the specific external compliance incident or CA-closure event causing the three Baltimore-issued revocations is not stated in this bug.

Confidence

Explicit in OneCRL thread · 0.94

Chronology

2018-01-23Bug 1432467 was created for CCADB-generated OneCRL entries.
2018-01-23Attachments were added for intermediates to be revoked and revocations.txt data.
2018-01-23Matt Goodwin noted that this set of additions includes the entry from bug 1427034.
2018-01-23Kathleen Wilson confirmed the entries were correct; one was for bug 1427034 and the other three were CCADB "Ready To Add" after CRL verification.
2018-01-24TLS Canary reported one affected site: surveys.intesasanpaolo.com.
2018-01-24JC stated the impact was expected because Mozilla was distrusting its root.
2018-01-29Ben Wilson said he reached out to IntesaSanpaolo to ensure awareness of the affected website.
2018-01-30Kathleen Wilson instructed JC to proceed with adding the entries to OneCRL.
2018-01-30JC stated: "Signed, pushed to OneCRL."
2018-01-31Kathleen Wilson confirmed the entries had been added to OneCRL.

Bug 1427034 Bug 1432467 surveys.intesasanpaolo.com observatory.mozilla.org crt.sh

AI-generated from the OneCRL record and linked Bugzilla thread. Mozilla and CCADB records remain authoritative.

Status	Name	Issuer	Serial	CCADB	Modified
enabled	—	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`0727BDCE`	Baltimore CyberTrust Root DigiCert	2018-01-23
enabled	—	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`072796C8`	Baltimore CyberTrust Root DigiCert	2018-01-23
enabled	—	C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root	`0727BDCF`	Baltimore CyberTrust Root DigiCert	2018-01-23

Raw Remote Settings Record

{
    "schema": 1552493004389,
    "details": {
        "bug": "https://bugzilla.mozilla.org/show_bug.cgi?id=1432467",
        "who": "",
        "why": "",
        "name": "",
        "created": "2018-01-23T13:41:18Z"
    },
    "enabled": true,
    "issuerName": "MFoxCzAJBgNVBAYTAklFMRIwEAYDVQQKEwlCYWx0aW1vcmUxEzARBgNVBAsTCkN5YmVyVHJ1c3QxIjAgBgNVBAMTGUJhbHRpbW9yZSBDeWJlclRydXN0IFJvb3Q=",
    "serialNumber": "Bye9zg==",
    "id": "fead3048-84a5-4256-9850-cf412c8cce88",
    "last_modified": 1516714883099
}