John Schanck

The new certificate for https://revoked-isrgrootx1.letsencrypt.org/ has an embedded SCT from a log with a short merge delay. As expected, it is being shown as revoked in CRLite / Firefox. ```...

I'm not sure if this will be useful, but it looks like application-services builds NSS on android: https://github.com/mozilla/application-services/blob/main/libs/build-nss-android.sh.

There's a new blog post [here](https://hacks.mozilla.org/2025/08/crlite-fast-private-and-comprehensive-certificate-revocation-checking-in-firefox/). CRLite has been the default revocation checking mechanism for Desktop Firefox since Firefox 137. All revocation results from CRLite are enforced since Firefox 142...