International Cyber Digest
@IntCyberDigest
‼️ GoDaddy is revoking 404,607 TLS certificates after a third party flagged that they didn't match its published certificate rules. t.co/SoNFcuNmJj
// tag
GoDaddy
Security incidents tagged GoDaddy. Newest first.
- incidents
- 1
- live
- 1
- patched
- 0
## 1 GoDaddy incident in the last year
through Oct 22, 2026crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore
- mediumlivepartial fixsince Oct 14, 2026
GoDaddy mass-revokes 404,607 TLS certificates over CP/CPS profile mismatch
› GoDaddy / Starfield TLS certificates (DV, OV, EV)
GoDaddy (Starfield) found that 404,607 TLS certificates carried policy information (policy OIDs, CPS URI) that didn't match its own published CP/CPS, which under the CA/Browser Forum Baseline Requirements means they must be revoked within five days. GoDaddy missed the Oct 18 deadline and says the certificates were revoked on Oct 21 2026. Nothing was hacked and no keys leaked, but sites still serving a revoked certificate can show browser warnings or become unreachable until the re-issued certificate is installed.
