GoDaddy: Improper DER results in failure to comply with RFC 5280 - Invalid characters in PrintableString

GoDaddy identified a compliance issue related to improperly formatted certificates that included invalid characters in the PrintableString field. The issue was first reported on May 18, 2018, prompting GoDaddy to initiate a revocation process. Certificates were revoked within the required 24-hour timeframe, and GoDaddy committed to providing an incident report detailing the findings and corrective actions. The CA has since implemented additional linting tools to prevent future occurrences. The case was resolved with the implementation of these measures.

1. 2018-05-18 GoDaddy became aware of malformed certificates via a Bugzilla report.
2. 2018-05-19 Certificates were revoked within 24 hours of detection.

1. 2018-05-19 Community commenter — Provided examples of certificates that failed to parse due to invalid characters.
2. 2018-05-21 GoDaddy — Updated on the revocation of certificates within the required timeframe.
3. 2018-05-25 GoDaddy — Detailed the timeline of actions taken after discovering the defect.
4. 2019-01-09 Fastly representative — Confirmed resolution of the case based on the improvements made.