Users of Firefox from Firefox 37 will be protected by a new feature called OneCRL. This is a new mechanism we have introduced to push lists of revoked intermediate certificates ...| Mozilla Security Blog
Mozilla's CA Certificate Program| wiki.mozilla.org