{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T16:23:59.585Z",
  "tag": {
    "id": "godaddy",
    "label": "GoDaddy",
    "isStack": false,
    "url": "https://pwn.watch/t/godaddy",
    "feed": "https://pwn.watch/t/godaddy/feed.xml"
  },
  "counts": {
    "incidents": 1,
    "live": 1,
    "notFullyPatched": 1,
    "patched": 0
  },
  "incidents": [
    {
      "slug": "godaddy-mass-certificate-revocation-oct-2026",
      "title": "GoDaddy mass-revokes 404,607 TLS certificates over CP/CPS profile mismatch",
      "url": "https://pwn.watch/i/godaddy-mass-certificate-revocation-oct-2026",
      "json": "https://pwn.watch/i/godaddy-mass-certificate-revocation-oct-2026.json",
      "status": "live",
      "severity": "medium",
      "patchStatus": "partial",
      "product": "GoDaddy / Starfield TLS certificates (DV, OV, EV)",
      "tags": [
        "hosting",
        "godaddy",
        "tls"
      ],
      "cveIds": [],
      "affectedVersions": [
        "404,607 certificates from Starfield R1/G2 and GoDaddy R1 intermediates (396,055 of them DV from Starfield R1 and G2)"
      ],
      "fixedVersions": [
        "Re-issued certificates from the GoDaddy SSL dashboard (customer must install them)"
      ],
      "startedAt": "2026-10-14",
      "closedAt": null,
      "updatedAt": "2026-10-22T14:58:57+02:00",
      "summary": "GoDaddy (Starfield) found that 404,607 TLS certificates carried policy information (policy OIDs, CPS URI) that didn't match its own published CP/CPS, which under the CA/Browser Forum Baseline Requirements means they must be revoked within five days. GoDaddy missed the Oct 18 deadline and says the certificates were revoked on Oct 21 2026. Nothing was hacked and no keys leaked, but sites still serving a revoked certificate can show browser warnings or become unreachable until the re-issued certificate is installed.",
      "xPost": null
    }
  ],
  "posts": [
    {
      "authorName": "International Cyber Digest",
      "handle": "IntCyberDigest",
      "avatarUrl": "https://pbs.twimg.com/profile_images/1831435438562615296/imkSFey2_bigger.jpg",
      "text": "‼️ GoDaddy is revoking 404,607 TLS certificates after a third party flagged that they didn't match its published certificate rules. https://t.co/SoNFcuNmJj",
      "date": "2026-10-21T20:03:00.000Z",
      "url": "https://x.com/IntCyberDigest/status/2112998104030982490",
      "media": [],
      "incident": "godaddy-mass-certificate-revocation-oct-2026"
    }
  ],
  "changes": [
    {
      "incident": "godaddy-mass-certificate-revocation-oct-2026",
      "incidentTitle": "GoDaddy mass-revokes 404,607 TLS certificates over CP/CPS profile mismatch",
      "severity": "medium",
      "status": "live",
      "patchStatus": "partial",
      "date": "2026-10-21",
      "title": "GoDaddy's customer notice says the incorrectly issued certificates were revoked; affected sites must install the re-issued certificate.",
      "body": null,
      "sourceUrl": "https://www.godaddy.com/help/what-is-the-cpcps-certificate-profile-bug-43095",
      "url": "https://pwn.watch/i/godaddy-mass-certificate-revocation-oct-2026"
    },
    {
      "incident": "godaddy-mass-certificate-revocation-oct-2026",
      "incidentTitle": "GoDaddy mass-revokes 404,607 TLS certificates over CP/CPS profile mismatch",
      "severity": "medium",
      "status": "live",
      "patchStatus": "partial",
      "date": "2026-10-19",
      "title": "227,422 of 404,607 certificates revoked as of 05:29 UTC.",
      "body": null,
      "sourceUrl": "https://bugzilla.mozilla.org/show_bug.cgi?id=2083191",
      "url": "https://pwn.watch/i/godaddy-mass-certificate-revocation-oct-2026"
    },
    {
      "incident": "godaddy-mass-certificate-revocation-oct-2026",
      "incidentTitle": "GoDaddy mass-revokes 404,607 TLS certificates over CP/CPS profile mismatch",
      "severity": "medium",
      "status": "live",
      "patchStatus": "partial",
      "date": "2026-10-18",
      "title": "Five-day revocation deadline (23:45 UTC) passes with 170,566 certificates revoked; GoDaddy files a delayed-revocation incident.",
      "body": null,
      "sourceUrl": "https://bugzilla.mozilla.org/show_bug.cgi?id=2083191",
      "url": "https://pwn.watch/i/godaddy-mass-certificate-revocation-oct-2026"
    },
    {
      "incident": "godaddy-mass-certificate-revocation-oct-2026",
      "incidentTitle": "GoDaddy mass-revokes 404,607 TLS certificates over CP/CPS profile mismatch",
      "severity": "medium",
      "status": "live",
      "patchStatus": "partial",
      "date": "2026-10-14",
      "title": "GoDaddy confirms a third-party report of CP/CPS discrepancies, suspends issuance, fixes its CP/CPS and starts contacting the 404,607 affected subscribers.",
      "body": null,
      "sourceUrl": "https://bugzilla.mozilla.org/show_bug.cgi?id=2083191",
      "url": "https://pwn.watch/i/godaddy-mass-certificate-revocation-oct-2026"
    }
  ]
}