GoDaddy revokes 404,607 SSL certificates after profile mismatch
Original title: GoDaddy Revokes 404,607 SSL Certificates Following Certificate Issuance Error
Revocation took effect October 21, 2026, and sites still serving those certificates can fail browser TLS checks.
GoDaddy revoked 404,607 SSL/TLS certificates issued outside the profiles in its Certificate Policy and Certification Practice Statement. The company says the certificates were re-issued, but customers must install replacements on servers, load balancers, CDNs, or hosting platforms. Mozilla tracks the case as Bug 2082703, which remains active. The report describes a compliance mismatch, not private-key compromise.
Unconfirmed: The report does not say any mis-issued certificate was used maliciously.
- Administrators can find affected certificates in the GoDaddy SSL portal.
- Messages include “Action required: Install your new certificate.”
- Certificates marked “No action needed” require no customer action.
- GoDaddy’s SSL Status Check tool can validate the live certificate.
Impact: Revoked certificates can block HTTPS access until replacements are installed
| Product | Affected | Fixed in |
|---|---|---|
| GoDaddy SSL/TLS certificates | 404,607 subscriber certificates issued outside CP/CPS profiles | re-issued replacement certificates |
- 1.Download and install the replacement certificate from the GoDaddy portal.
- 2.Inventory public endpoints, proxies, ingress, and load balancers for old GoDaddy certificates.
- 3.Validate the live certificate and intermediate chain from an external network.
- Vendors
- GoDaddy
- Products
- GoDaddy SSL/TLS certificates
- Organizations
- Mozilla
From the original article
2 min read at gbhackers.com
GoDaddy has revoked 404,607 SSL/TLS certificates after discovering that certain subscriber certificates were issued outside the defined profiles in its Certification Practice Statement (CPS) and Certificate Policy (CP). The revocation took effect on October 21, 2026, requiring affected customers to obtain and install replacement certificates to avoid browser security warnings and potential website outages. This […]
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.