Add Vodafone Cross-Certificates issued by Baltimore Cybertrust to OneCRL

RESOLVED FIXED

Status

Product:
NSS
Component:
CA Certificate Root Program
Status:
RESOLVED FIXED
Reported:
2 years ago
Modified:
2 years ago

People

(Reporter: ben.wilson, Assigned: kwilson)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [ca-onecrl])

(Reporter)

Description

•
2 years ago 
User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0
Build ID: 20170302120751
(Reporter)

Comment 1

•
2 years ago 
Add the following CA cross certificates to OneCRL because they are being retired in the normal course of operations:

Serial # ‎07 27 7f 52 issued by Baltimore Cybertrust Root to Vodafone (Trusted Clients)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


Serial # ‎‎07 27 7f 4e issued by Baltimore Cybertrust Root to Vodafone (Secure Sites)

-----BEGIN CERTIFICATE-----
MIIEMzCCAxugAwIBAgIEByd/TjANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJJ
RTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYD
VQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTEyMTIxOTE3MjEwMFoX
DTE5MTIxOTE3MTkzOVowSDELMAkGA1UEBhMCVUsxFzAVBgNVBAoTDlZvZGFmb25l
IEdyb3VwMSAwHgYDVQQDExdWb2RhZm9uZSAoU2VjdXJlIFNpdGVzKTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAK7AVuSCorcmLK4BrEeBiq1J1tNSKlpK
eNwPc3hsdxjWwMj/HJaow/i7kef6xkjFDE9YTEhBxATPHRrQeXqyODasFsuO+USs
IBCTDt/b1b96s91hE5JlaxwHA29vem1Euyo781tEpXtyruDUPEFGWHFMbx7VNqnX
dAzD5Epo8EWqTTYQ+ka1uNWiy9dZQT926nQZ1SZRJylh8m2pC0ZjQSs+7gXmLsph
kvFFHU0uph4+wnMyiVAiqqLqGaoks3T1uWf7zr8AEQdhIp51oDCoC2oyKxW2cENR
5ZCMf28HQMzZeqI4bO9GtMDjvU8Y0z0CPEKV9XduVrwxlK5ZP6vkbCkCAwEAAaOC
AREwggENMBIGA1UdEwEB/wQIMAYBAf8CAQEwYwYDVR0gBFwwWjBIBgkrBgEEAbE+
AQAwOzA5BggrBgEFBQcCARYtaHR0cDovL2N5YmVydHJ1c3Qub21uaXJvb3QuY29t
L3JlcG9zaXRvcnkuY2ZtMA4GDCqGOgAB7/VPAQEDBDAOBgNVHQ8BAf8EBAMCAQYw
HwYDVR0jBBgwFoAU5Z1ZMIJHWMys+ghUNoZ7OrUETfAwQgYDVR0fBDswOTA3oDWg
M4YxaHR0cDovL2NkcDEucHVibGljLXRydXN0LmNvbS9DUkwvT21uaXJvb3QyMDI1
LmNybDAdBgNVHQ4EFgQUi/hYkot3HMnh9OlrvgKHFgNweT0wDQYJKoZIhvcNAQEF
BQADggEBAAkLY3FhilOOUHt6jq856YI1VPUoSpl6G0dTBpWntgPzK7s5rblJGwv8
FJ/Zu55dLH7yfAEriQ9mfxX+a0mX5JZFFkwC4r3pd0drMhNP2bP7i0ZnTGLduiHV
oCiiVKrYCAyzMDdafojVaYaAj4SR4gvdfZ8DNL85MWtcgTGGUTcmjzBqbo8J2z++
HliA+XqK0eWUBcijxtdseAeAd9X/ba/foezv5SsGpSc1Q2Bgb2FFbLixhEvEKhJO
hS2RnwxogW3dItWq8MBXMR2nD90aBQ9+eXrVidZOMpaToyAoI4G1Y/j0iiGooN9V
byn7EAIuSqUVxJAYrkae2Z3KrL9ndxA=
-----END CERTIFICATE-----


Serial # ‎‎‎07 27 7f 51 issued by Baltimore Cybertrust Root to Vodafone (Secure Networks)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


Serial # ‎07 27 7f 50 issued by Baltimore Cybertrust Root to Vodafone (Secure Data)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
(Assignee)

Comment 2

•
2 years ago 

(In reply to Ben Wilson from comment #1)
> Add the following CA cross certificates to OneCRL because they are being
> retired in the normal course of operations:
> 
> Serial # ‎07 27 7f 52 issued by Baltimore Cybertrust Root to Vodafone
> (Trusted Clients)
> 
> -----BEGIN CERTIFICATE-----
> MIIENjCCAx6gAwIBAgIEByd/UjANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJJ
> RTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYD
> VQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTEyMTIxOTE3NDMxNloX
> DTE5MTIxOTE3NDMwM1owSzELMAkGA1UEBhMCVUsxFzAVBgNVBAoTDlZvZGFmb25l
> IEdyb3VwMSMwIQYDVQQDExpWb2RhZm9uZSAoVHJ1c3RlZCBDbGllbnRzKTCCASIw
> DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIUJvbz0wiyUZaNdVxf6TmR7SJLX
> 4oekztpSqt1lV4aep3JbsQTQKBRkwqWEfGSllGrnA/pE+ijUnBnNA1l0JUBhMtXs
> 7MkC5s5P/KkLWICcd82xOqyhzuRKYBTCVoaQ5xjN+W8UgiMVUDhy7utiVHTgfo60
> ihbZWfh3mkv95SCRVw0PHI0BH44xngwABJnyYq/gv8xuzXpz1wnYC9oYx0HmsBBk
> QpQGFSEJYBsm1PKOnoDVhBMvWNVo8cvDhF3cNluBw0p4DdmwkCa+A1PVdVwXegCe
> tcR7O5/voHCHpLlBX/irNcfF1oYe5o3XWeiDLWyNg+D0+lZKFke8eyg/I4cCAwEA
> AaOCAREwggENMBIGA1UdEwEB/wQIMAYBAf8CAQEwYwYDVR0gBFwwWjBIBgkrBgEE
> AbE+AQAwOzA5BggrBgEFBQcCARYtaHR0cDovL2N5YmVydHJ1c3Qub21uaXJvb3Qu
> Y29tL3JlcG9zaXRvcnkuY2ZtMA4GDCqGOgAB7/VPAQEDBTAOBgNVHQ8BAf8EBAMC
> AQYwHwYDVR0jBBgwFoAU5Z1ZMIJHWMys+ghUNoZ7OrUETfAwQgYDVR0fBDswOTA3
> oDWgM4YxaHR0cDovL2NkcDEucHVibGljLXRydXN0LmNvbS9DUkwvT21uaXJvb3Qy
> MDI1LmNybDAdBgNVHQ4EFgQUmgg1dqSyqsBOJQwHqBkYolNvfykwDQYJKoZIhvcN
> AQEFBQADggEBAGF0KSBeeZtQC6HQE/ussPw3YAod/rRiCu2oW6SPRY3j2FZs+v9M
> TT4ZL4ekeNaTxBiXmniaVkkNXvNgV69QZ/J1AhMv8FQZ9cNYuLdPmSPchfCOcs0R
> mcvn9yiZsFVRHKL6i45zK1FITzVsDabn2QsMY8FKQq8n8QC94/tkseMhaQJXtDPM
> dwGmulwTFPKG/StPKE9IUsGjmTJDeuGhi138qAgfnVBVriV/05ROU9TzMyG6uN0d
> H2lq/DwDZOORnaxYT4xUTcj6CO+YMZAPlj2ZLKtHsRNv1Lm/2HBc2lv1hq/33L7z
> 1DdsMZbuOJSSbM1it+dabTPWkmjkX1YN98I=
> -----END CERTIFICATE-----



serial number	7277f52
subject	/C=UK/O=Vodafone Group/CN=Vodafone (Trusted Clients)
issuer	/C=IE/O=Baltimore/OU=CyberTrust/CN=Baltimore CyberTrust Root
not before	2012-12-19T17:43:16Z
not after	2019-12-19T17:43:03Z
signature algorithm	SHA1WithRSA
key size	2048
exponent	65537
sha1 hash	712242a358f8d22c782decf92962f94d21a9e44d
sha256 hash	231dc1311c77749a3614c7a54616f1da516eb3208459d17e36171e977fd89e41

Common CA Database:
Revocation Status == Not Revoked

I checked http://cdp1.public-trust.com/CRL/Omniroot2025.crl
 Last Update: Mar 14 20:28:31 2017 GMT
I cannot find 07277f52 in the CRL.


> 
> 
> Serial # ‎‎07 27 7f 4e issued by Baltimore Cybertrust Root to Vodafone
> (Secure Sites)
> 
> -----BEGIN CERTIFICATE-----
> MIIEMzCCAxugAwIBAgIEByd/TjANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJJ
> RTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYD
> VQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTEyMTIxOTE3MjEwMFoX
> DTE5MTIxOTE3MTkzOVowSDELMAkGA1UEBhMCVUsxFzAVBgNVBAoTDlZvZGFmb25l
> IEdyb3VwMSAwHgYDVQQDExdWb2RhZm9uZSAoU2VjdXJlIFNpdGVzKTCCASIwDQYJ
> KoZIhvcNAQEBBQADggEPADCCAQoCggEBAK7AVuSCorcmLK4BrEeBiq1J1tNSKlpK
> eNwPc3hsdxjWwMj/HJaow/i7kef6xkjFDE9YTEhBxATPHRrQeXqyODasFsuO+USs
> IBCTDt/b1b96s91hE5JlaxwHA29vem1Euyo781tEpXtyruDUPEFGWHFMbx7VNqnX
> dAzD5Epo8EWqTTYQ+ka1uNWiy9dZQT926nQZ1SZRJylh8m2pC0ZjQSs+7gXmLsph
> kvFFHU0uph4+wnMyiVAiqqLqGaoks3T1uWf7zr8AEQdhIp51oDCoC2oyKxW2cENR
> 5ZCMf28HQMzZeqI4bO9GtMDjvU8Y0z0CPEKV9XduVrwxlK5ZP6vkbCkCAwEAAaOC
> AREwggENMBIGA1UdEwEB/wQIMAYBAf8CAQEwYwYDVR0gBFwwWjBIBgkrBgEEAbE+
> AQAwOzA5BggrBgEFBQcCARYtaHR0cDovL2N5YmVydHJ1c3Qub21uaXJvb3QuY29t
> L3JlcG9zaXRvcnkuY2ZtMA4GDCqGOgAB7/VPAQEDBDAOBgNVHQ8BAf8EBAMCAQYw
> HwYDVR0jBBgwFoAU5Z1ZMIJHWMys+ghUNoZ7OrUETfAwQgYDVR0fBDswOTA3oDWg
> M4YxaHR0cDovL2NkcDEucHVibGljLXRydXN0LmNvbS9DUkwvT21uaXJvb3QyMDI1
> LmNybDAdBgNVHQ4EFgQUi/hYkot3HMnh9OlrvgKHFgNweT0wDQYJKoZIhvcNAQEF
> BQADggEBAAkLY3FhilOOUHt6jq856YI1VPUoSpl6G0dTBpWntgPzK7s5rblJGwv8
> FJ/Zu55dLH7yfAEriQ9mfxX+a0mX5JZFFkwC4r3pd0drMhNP2bP7i0ZnTGLduiHV
> oCiiVKrYCAyzMDdafojVaYaAj4SR4gvdfZ8DNL85MWtcgTGGUTcmjzBqbo8J2z++
> HliA+XqK0eWUBcijxtdseAeAd9X/ba/foezv5SsGpSc1Q2Bgb2FFbLixhEvEKhJO
> hS2RnwxogW3dItWq8MBXMR2nD90aBQ9+eXrVidZOMpaToyAoI4G1Y/j0iiGooN9V
> byn7EAIuSqUVxJAYrkae2Z3KrL9ndxA=
> -----END CERTIFICATE-----

serial number	07277f4e
subject	/C=UK/O=Vodafone Group/CN=Vodafone (Secure Sites)
issuer	/C=IE/O=Baltimore/OU=CyberTrust/CN=Baltimore CyberTrust Root
not before	2012-12-19T17:21:00Z
not after	2019-12-19T17:19:39Z
signature algorithm	SHA1WithRSA
key size	2048
exponent	65537
sha1 hash	d26aa50e9edf406f72d43fb534de185b45de468e
sha256 hash	b194397267bd322f8e6b84485d64534c1e74efcafc90495334d15b4d28573818

Common CA Database:
Revocation Status == Revoked
OneCRL Statyus == Ready to Add


> 
> 
> Serial # ‎‎‎07 27 7f 51 issued by Baltimore Cybertrust Root to Vodafone
> (Secure Networks)
> 
> -----BEGIN CERTIFICATE-----
> MIIENjCCAx6gAwIBAgIEByd/UTANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJJ
> RTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYD
> VQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTEyMTIxOTE3NDE0MFoX
> DTE5MTIxOTE3NDEyMlowSzELMAkGA1UEBhMCVUsxFzAVBgNVBAoTDlZvZGFmb25l
> IEdyb3VwMSMwIQYDVQQDExpWb2RhZm9uZSAoU2VjdXJlIE5ldHdvcmtzKTCCASIw
> DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALCRIf+zZ4gBriFWecPt4iJd0Edc
> 4jwSRDizITPFyqHg0G2DQOa527oK8IlMK2Ce+U12Ra7B9OFBKCpvFew6xUVocdY9
> vpeLPB19CtmBvayD7q7Oswj/ExOGY5wgtkDo3YAOjoASssvp+wObWz5dsEUnCLwT
> EVgTHBkugwc27MRbdETnJ6IcnvtsGpFsMbGpuMiKat6OqpbM8ReeMkotBfPiio/u
> ovgJheDYDfmE3dN8oDoVPBtD2L7f8PL1lwpySMV8krDoAp38LGEkuJ7/H273aO+V
> PG733b53C7cwAuksk7spniWt+EEmmebf9yGYJGw9ydks5cLQ883/uIIJgv0CAwEA
> AaOCAREwggENMBIGA1UdEwEB/wQIMAYBAf8CAQEwYwYDVR0gBFwwWjBIBgkrBgEE
> AbE+AQAwOzA5BggrBgEFBQcCARYtaHR0cDovL2N5YmVydHJ1c3Qub21uaXJvb3Qu
> Y29tL3JlcG9zaXRvcnkuY2ZtMA4GDCqGOgAB7/VPAQEDBjAOBgNVHQ8BAf8EBAMC
> AQYwHwYDVR0jBBgwFoAU5Z1ZMIJHWMys+ghUNoZ7OrUETfAwQgYDVR0fBDswOTA3
> oDWgM4YxaHR0cDovL2NkcDEucHVibGljLXRydXN0LmNvbS9DUkwvT21uaXJvb3Qy
> MDI1LmNybDAdBgNVHQ4EFgQUPYT7cz2qhoPbmlrMy3Jn5SW5GuAwDQYJKoZIhvcN
> AQEFBQADggEBAIi9Bq2Mxv7be3SgQaUxaCkqvQxKkpPy6Ss5tF0aEFHfpc2XFCP/
> cJezxqvm3LFvRKpnUGmfv4qrxde0lXiFBIFMewkcunqy/TwAxgt6i/dGC37vz7I4
> sOjK+7MYBqc2ZH3ecly392jBUk/MKlJ3mx3qDg7WzZ6dBo1sEd1vbO7Gn6Q34/KM
> 6sT89F4mftTvv+IHiOfI9s63wuhggpqmJZi78hOAc3APabJVYw4xOTXd6LQmh4+r
> kMmFxZJG6LRazXKcY7YbEWsZUyUjAA8yeKL/UWnqhfZq5UM+ki4ILD1gVw6gdyxG
> EqjFFTab4bP2SQfEaQFippQE1VpCupwaoJc=
> -----END CERTIFICATE-----


serial number	07277f51
subject	/C=UK/O=Vodafone Group/CN=Vodafone (Secure Networks)
issuer	/C=IE/O=Baltimore/OU=CyberTrust/CN=Baltimore CyberTrust Root
not before	2012-12-19T17:41:40Z
not after	2019-12-19T17:41:22Z
signature algorithm	SHA1WithRSA
key size	2048
exponent	65537
sha1 hash	7c54191a0e650d92d973d9b432b237823df5c3f8
sha256 hash	23b0921139a42a90e0a63f8f0afae1768aae4536698c8a02e8cd46bbb0bd8fd2


Common CA Database:
Revocation Status == Not Revoked

I checked http://cdp1.public-trust.com/CRL/Omniroot2025.crl
 Last Update: Mar 14 20:28:31 2017 GMT
I cannot find 07277f51 in the CRL.


> 
> 
> Serial # ‎07 27 7f 50 issued by Baltimore Cybertrust Root to Vodafone
> (Secure Data)
> 
> -----BEGIN CERTIFICATE-----
> MIIEMjCCAxqgAwIBAgIEByd/UDANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJJ
> RTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYD
> VQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTEyMTIxOTE3Mzk0OFoX
> DTE5MTIxOTE3MzkyOFowRzELMAkGA1UEBhMCVUsxFzAVBgNVBAoTDlZvZGFmb25l
> IEdyb3VwMR8wHQYDVQQDExZWb2RhZm9uZSAoU2VjdXJlIERhdGEpMIIBIjANBgkq
> hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU2ZveRdVx+FYauLaEldLt/d7ihP9aMw
> U9ICVOPIpVfsjSBdZRNw+ebRFRF/Q3hAyvHvExeGJrlhDC+U9/pn1Yk3Jr2G1NC5
> lomYI9GzQtED1dOY6zsm8/aftftJd/w9azAYXpXMJnz+n+vk8nkUct/Vfyc6xr0y
> Lg5qxOcc/GV9Cngeps6VhSS4PEGvFIAEXdWRD3Kren23LQ2O9xER64Ancqvx1roe
> MnESWwBGOAwLKoTy2WQZIyAUEF3cMbNJEJU0zFQKnDBAxfDHpIWuSoNM3jq49xFc
> +cdTdcdKm/ocjXxRtLcd8ZURnWvlIycbP6A7QN2n3XYWElWINmdlywIDAQABo4IB
> ETCCAQ0wEgYDVR0TAQH/BAgwBgEB/wIBATBjBgNVHSAEXDBaMEgGCSsGAQQBsT4B
> ADA7MDkGCCsGAQUFBwIBFi1odHRwOi8vY3liZXJ0cnVzdC5vbW5pcm9vdC5jb20v
> cmVwb3NpdG9yeS5jZm0wDgYMKoY6AAHv9U8BAQMDMA4GA1UdDwEB/wQEAwIBBjAf
> BgNVHSMEGDAWgBTlnVkwgkdYzKz6CFQ2hns6tQRN8DBCBgNVHR8EOzA5MDegNaAz
> hjFodHRwOi8vY2RwMS5wdWJsaWMtdHJ1c3QuY29tL0NSTC9PbW5pcm9vdDIwMjUu
> Y3JsMB0GA1UdDgQWBBTOl/C4Tq+gtXKqU8fqkOTeCQH2LjANBgkqhkiG9w0BAQUF
> AAOCAQEAPb3a6SYBNDO/rWnpk2iQk+smYb+gtyx9fZ+zIeUijD5xt63ulweTq/WO
> 0H9v0f1giDYGTIp/Mwwogrce175NcYCECv2z1LhJpClIg4oaMcIoMtnDHreOpgCV
> vWXrKe5GkvznngKKdSiMPUihOghQg0cZHL2m9YmiNZOno0TkX/aSoh7vDZOajsFJ
> 7XBCIravQaW/yRBARbWD4DNQulLLLcT90wyXPHugzYEKnspWQxPEa/cG9vEWPyev
> gHSyjypQTN63QcIQF52u5VtdzET8ZWyKR77pw9cZiPx83BbgM0PoSQiDeELTnMvL
> pd4uodBZtP5msmRPbNjBSRV4LkHxWw==
> -----END CERTIFICATE-----


serial number	7277f50
subject	/C=UK/O=Vodafone Group/CN=Vodafone (Secure Data)
issuer	/C=IE/O=Baltimore/OU=CyberTrust/CN=Baltimore CyberTrust Root
not before	2012-12-19T17:39:48Z
not after	2019-12-19T17:39:28Z
signature algorithm	SHA1WithRSA
key size	2048
exponent	65537
sha1 hash	082d4ee70fb4a27fb84a441c46006be74a6a43f3
sha256 hash	a0d32966f0c3ef30cc726d3cd22ef42fad1fe1f49cea77bb51c20fbfadc256f3

Common CA Database:
Revocation Status == Not Revoked

I checked http://cdp1.public-trust.com/CRL/Omniroot2025.crl
 Last Update: Mar 14 20:28:31 2017 GMT
I cannot find 07277f50 in the CRL.
Assignee: nobody → kwilson
Component: CA Certificates → CA Certificates
Product: NSS → mozilla.org
Version: trunk → other
(Assignee)

Comment 3

•
2 years ago 
Ben, 

Have these all been revoked?
If yes, please make sure the CRL gets updated, and update their "Revocation Status" in the Common CA Database.

Comment 4

•
2 years ago 
Yes - they have all been revoked. Their OneCRL bug is here: https://intra.digicert.com/jira/browse/CAM-12
(Assignee)

Comment 5

•
2 years ago 
The corresponding records in the Common CA Database are now marked as 'Revoked' and have OneCRL Status 'Ready to Add'.
Whiteboard: [ca-onecrl]
(Reporter)

Comment 6

•
2 years ago 
Today we also revoked the following certificate issued to Vodafone (Corporate Domain 2009).  This was in the normal course of operations.
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
(Reporter)

Comment 7

•
2 years ago 
I also indicated the revocation of the Vodafone (Corporate Domain 2009) certificate in the Common CA Database.

Updated

•
2 years ago
Product: mozilla.org → NSS
 (Assignee)

Comment 8

•
2 years ago 
All of the certs in this bug (listed below) have OneCRL Status of "Ready to Add" in the CCADB.


> serial number	07277f52
> issuer	/C=IE/O=Baltimore/OU=CyberTrust/CN=Baltimore CyberTrust Root
> sha1 hash	712242a358f8d22c782decf92962f94d21a9e44d
> sha256 hash	231dc1311c77749a3614c7a54616f1da516eb3208459d17e36171e977fd89e41


> serial number	07277f4e
> issuer	/C=IE/O=Baltimore/OU=CyberTrust/CN=Baltimore CyberTrust Root
> sha1 hash	d26aa50e9edf406f72d43fb534de185b45de468e
> sha256 hash	b194397267bd322f8e6b84485d64534c1e74efcafc90495334d15b4d28573818


> serial number	07277f51
> issuer	/C=IE/O=Baltimore/OU=CyberTrust/CN=Baltimore CyberTrust Root
> sha1 hash	7c54191a0e650d92d973d9b432b237823df5c3f8
> sha256 hash	23b0921139a42a90e0a63f8f0afae1768aae4536698c8a02e8cd46bbb0bd8fd2


> serial number	7277f50
> issuer	/C=IE/O=Baltimore/OU=CyberTrust/CN=Baltimore CyberTrust Root
> sha1 hash	082d4ee70fb4a27fb84a441c46006be74a6a43f3
> sha256 hash	a0d32966f0c3ef30cc726d3cd22ef42fad1fe1f49cea77bb51c20fbfadc256f3


> serial number	07277f4f
> issuer	/C=IE/O=Baltimore/OU=CyberTrust/CN=Baltimore CyberTrust Root
> sha1 hash	c50e88e520a810411d634cb8f9cc939bfd769399
> sha256 hash	25743847875218d6c3c6c50ddc1e1f75977e705926d7282b87b28eaed39af73d
 (Assignee)

Comment 9

•
2 years ago 
(In reply to Kathleen Wilson from comment #8)
> All of the certs in this bug (listed below) have OneCRL Status of "Ready to
> Add" in the CCADB.


These have all been added to OneCRL.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 2 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.