2046880 - CCADB entries generated 2026-06-11T17:02:37Z

Status: RESOLVED FIXED

(Core :: Security Block-lists, Allow-lists, and other State, enhancement)

Description

[Common CA Database to OneCRL Bot]

Adding entries to OneCRL based on revoked intermediate certificates reported in the CCADB.

Comment 1

[Common CA Database to OneCRL Bot]

Attachment: Line delimited issuer/serial pairs

Comment 2

[Common CA Database to OneCRL Bot]

Attachment: The additions to OneCRL proposed by this bug.

Comment 3

[Common CA Database to OneCRL Bot]

Attachment: Entries with their names decoded to plain text and hexadecimal serials/hashes.

Comment 4

[Ben Wilson]

These 37 CA certificates listed in the file attached to Comment #1 need to be added to OneCRL, and they are ready for review/approval in Staging:

issuer: /C=US/O=Internet Security Research Group/CN=ISRG Root X2 serial: 6f5e60e69c3a7469906619d56e4f499a
issuer: /C=CN/O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD./CN=GDCA TrustAUTH R5 ROOT serial: 7aa7215f89b71902
issuer: /C=KR/O=NAVER Cloud Trust Services Corp./CN=NAVER Cloud Trust Services RSA Root G1 serial: 0931f2a391e433a99dfa9089b18ee56368893650
issuer: /C=KR/O=NAVER Cloud Trust Services Corp./CN=NAVER Cloud Trust Services RSA Root G1 serial: 04a10f19a216dcbbf6088447d8f371adcee7d249
issuer: /C=KR/O=NAVER BUSINESS PLATFORM Corp./CN=NAVER Global Root Certification Authority serial: 112d765cba0a840b06e8b2a66a905e17c6a835c7
issuer: /C=PL/O=Unizeto Technologies S.A./OU=Certum Certification Authority/CN=Certum Trusted Network CA serial: 00cd2656ac6b5b52193ad23af66d520aa3
issuer: /C=NO/O=Buypass AS-983163327/CN=Buypass Class 3 Root CA serial: 1e
issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root G2 serial: 0c8ee0c90d6a89158804061ee241f9af
issuer: /C=KR/O=NAVER Cloud Trust Services Corp./CN=NAVER Cloud Trust Services ECC Root G1 serial: 0cd7eb1228062e6bf76156a65ce67d86ce0671ed
issuer: /C=CN/O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD./CN=GDCA TrustAUTH R5 ROOT serial: 7122983bb4f86962
issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root G2 serial: 0a4f7939b52aa411ec887ecc60204145
issuer: /C=CN/O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD./CN=GDCA TrustAUTH R5 ROOT serial: 358f82865ce62db1
issuer: /C=PL/O=Asseco Data Systems S.A./OU=Certum Certification Authority/CN=Certum Trusted Root CA serial: 348fd53b17f7f4768a95350c16b42d
issuer: /C=KR/O=NAVER Cloud Trust Services Corp./CN=NAVER Cloud Trust Services ECC Root G1 serial: 05fad6522186f62ae88bcb51d545f41ea4a35736
issuer: /C=PL/O=Unizeto Technologies S.A./OU=Certum Certification Authority/CN=Certum Trusted Network CA serial: 00a3b6745069731e987a047118b58306cd
issuer: /C=CN/O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD./CN=GDCA TrustAUTH R5 ROOT serial: 7639e3809c621e26
issuer: /C=CN/O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD./CN=GDCA TrustAUTH R5 ROOT serial: 029233246bc6314b
issuer: /C=CN/O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD./CN=GDCA TrustAUTH R5 ROOT serial: 640c3b33de073c61
issuer: /C=CN/O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD./CN=GDCA TrustAUTH R5 ROOT serial: 283452f4733f26a6
issuer: /C=US/O=Internet Security Research Group/CN=ISRG Root X1 serial: 7f2ab707b5bdd93c9fd48b7c6029db33
issuer: /C=KR/O=NAVER BUSINESS PLATFORM Corp./CN=NAVER Global Root Certification Authority serial: 06046233a5825576a48272694718a8000f2f000d
issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root G2 serial: 053bb5c81c7f454d7eb9e446a2a98a7e
issuer: /C=RO/O=CERTSIGN SA/OU=certSIGN ROOT CA G2 serial: 1002a980fb5f4585dd08
issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root G3 serial: 062b14a28c40fdda2a1cbb90c9667185
issuer: /C=CN/O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD./CN=GDCA TrustAUTH R5 ROOT serial: 39c077fc1ed615e3
issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root G2 serial: 0d6f6c9f018abcf73e604111d0a3f18a
issuer: /C=NO/O=Buypass AS-983163327/CN=Buypass Class 2 Root CA serial: 32fa08376bf23c2013
issuer: /C=RO/O=CERTSIGN SA/OU=certSIGN ROOT CA G2 serial: 10034b8e66f50920f6c5
issuer: /C=RO/O=CERTSIGN SA/OU=certSIGN ROOT CA G2 serial: 1001660345dd0680e322
issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root G3 serial: 0588c00c8cc0c577667e64cba88bab49
issuer: /C=US/O=Internet Security Research Group/CN=ISRG Root X1 serial: 00faa6275dc258431d9766ec3045ef24ac
issuer: /C=CN/O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD./CN=GDCA TrustAUTH R5 ROOT serial: 28356a9c70b45578
issuer: /C=PL/O=Asseco Data Systems S.A./OU=Certum Certification Authority/CN=Certum EC-384 CA serial: 0e1c857bdccf72beaf2bcf648f857185
issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root G3 serial: 0dd88f3dd0df3f2713312b9d42269ee7
issuer: /C=KR/O=NAVER BUSINESS PLATFORM Corp./CN=NAVER Global Root Certification Authority serial: 104872734231f1688abc4792e57595957126c9ea
issuer: /C=BM/O=QuoVadis Limited/CN=QuoVadis Root CA 3 G3 serial: 0c2163a44924ffb7fcdb675acdcaee7208cca95a
issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root G3 serial: 04a290e3cdee4dc6e042e92bad3a7476

Comment 5

[Dana Keeler (she/her) [:keeler]]

Attachment: output.txt

Approved in stage.

Comment 6

[Ben Wilson]

The issuer and serial entries in the file "additions to OneCRL proposed by this bug" are equivalent to the entries in the file "output.txt".
Please proceed with approving these changes in Production.
Thanks,
Ben

Comment 7

[Dana Keeler (she/her) [:keeler]]

Approved in prod.

Comment 8

[Ben Wilson]

These are all in the Firefox profiles. I'll update these 37 in the CCADB.