T-Systems International GmbH (Deutsche Telekom) has indicated that the following two certs are not intended to issued TLS certs so they can be added to OneCRL, even though they are not revoked. 1) https://crt.sh/?id=12722248 Issuer commonName = Deutsche Telekom Root CA 2 Certificate Serial Number: 46a157c463ee035f Subject commonName = Deutsche Telekom AG Issuing CA i01 SHA-256 Fingerprint 93:A6:5F:14:2B:AD:10:D7:F4:40:DE:30:75:6E:CE:51:5D:C4:51:5F:3E:95:ED:70:1F:7C:94:29:C7:D9:99:EF 2) https://crt.sh/?id=12624834 Issuer commonName = Deutsche Telekom Root CA 2 Certificate Serial Number: 0115 Subject commonName = Deutsche Telekom AG Issuing CA 01 SHA-256 Fingerprint DA:ED:C3:23:ED:85:FA:CF:B7:A0:3E:E6:E3:5E:B4:F6:11:9E:46:E9:22:7B:B5:A3:AB:08:0A:06:85:07:7D:CC

I will update the corresponding records in the CCADB to indicate that their OneCRL status is "Ready To Add", so they will get picked up an a future batch of changes to OneCRL.

These entries are being added to OneCRL via Bug #1407559.

These have been added to OneCRL.