GoDaddy Revokes 404,607 SSL Certificates After Policy Errors

GoDaddy revoked 404,607 SSL (Secure Sockets Layer) and TLS (Transport Layer Security) certificates on October 21, 2026, after finding errors in how they had been issued. The affected certificates were issued under GoDaddy and Starfield.

CompareSecurity

The issue came to light after a third party found that the certificates did not match Starfield’s published Certificate Policy and Certification Practice Statement (CP/CPS). The differences involved certificate policy object identifiers (OIDs) and CPS URI qualifiers, which identify the policies associated with a certificate and point to the authority’s documented practices.

GoDaddy suspended certificate issuance while investigating, corrected its published documentation and resumed issuance. Its review also identified similar discrepancies in the older Starfield G2 hierarchy, which no longer issued new certificates, according to Mozilla’s incident report.

Domain-validation (DV) certificates accounted for most of the affected population. Starfield R1 DV accounted for 208,896 certificates, while Starfield G2 DV accounted for 187,159. Another...

Copyright of this story solely belongs to hackread.com. To see the full text click HERE