GoDaddy: New GoDaddy incorrect issuance bug appears to be regression of 2010 issue

RESOLVED INCOMPLETE GoDaddy

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

This case involves a report of incorrect certificate issuance by GoDaddy, which appears to be a regression of a similar issue reported in 2010. The user detailed steps to reproduce the problem, indicating that domain verification could be bypassed due to misconfigurations. Mozilla's team discussed whether this issue was separate from ongoing investigations and acknowledged the need for GoDaddy to implement preventative measures. The bug was ultimately resolved and made public after confirming that it was no longer actionable.

Model: gpt-4o-mini Generated: 2026-06-13 14:10 UTC Revised: 2026-06-16 18:33 UTC Confidence: 0.85 15 comments

Chronology

2017-01-12 User reported a new incorrect issuance bug related to GoDaddy's certificate verification process.
2017-03-20 Bug was closed and made public after confirming no further action was needed.

Thread Activity

2017-01-12 Fredemmott representative — User reported a regression of a previous issue with GoDaddy's certificate issuance.
2017-01-12 Mozilla representative — Inquired if this issue was separate from another ongoing investigation.
2017-03-20 Mozilla representative — Indicated the bug was no longer actionable and recommended closing it.

Participants

Fredemmott representative Mozilla representative

External References

Original Bugzilla Case

Similar Local Cases

#1391429 RESOLVED Certificate Misissuance Revocation Issue Opened 2017-08-17 · Closed 2024-02-27 · 95% similar

GoDaddy: Non-BR-Compliant Certificate Issuance

AI Summary CA Owner

#988633 RESOLVED Ca Certificate Compliance Certificate Misissuance Opened 2014-03-26 · Closed 2023-02-22 · 86% similar

GoDaddy: improperly encoded certificate issued by Go Daddy Secure Certification Authority

AI Summary CA Owner

#1777128 RESOLVED Certificate Misissuance Opened 2022-06-28 · Closed 2023-02-22 · 78% similar

GoDaddy: Misissuance of Cross Signed Certs

AI Summary CA Owner

#1034834 RESOLVED Certificate Misissuance Opened 2014-07-05 · Closed 2022-11-14 · 76% similar

Visa: Issuing 1024 bit certificates

AI Summary CA Owner

#1390977 RESOLVED Certificate Misissuance Opened 2017-08-16 · Closed 2023-02-22 · 76% similar

Camerfirma: Non-BR-Compliant Certificate Issuance

AI Summary CA Owner

#1369359 RESOLVED Ca Certificate Compliance Certificate Misissuance Opened 2017-06-01 · Closed 2023-02-22 · 75% similar

StartCom: mis-issuance of certs with unvalidated domain names and bogus field values

AI Summary CA Owner

#1420766 RESOLVED Certificate Misissuance Opened 2017-11-26 · Closed 2024-05-09 · 75% similar

Globalsign / AlphaSSL: CAA Mis-Issuance on mix of wildcard and non-wildcard DNS names in SAN

AI Summary CA Owner

#1304089 RESOLVED Certificate Misissuance Opened 2016-09-20 · Closed 2022-11-14 · 74% similar

Bug in GlobalSign Certificate Centre not populating EKUs in 68 SSL certificates

AI Summary CA Owner