← GoDaddy cases
Bugzilla #1646226
Certificate Problem Report
GoDaddy: Document Reuse Issue
RESOLVED
FIXED
GoDaddy
AI Summary
GoDaddy identified a document reuse issue that led to the misidentification of document validity dates for certain certificates. After an internal audit, they discovered that 495 certificates were affected, including 398 OV certificates and 97 code signing certificates. The issue was traced back to a combination of manual procedures and system functionality. GoDaddy revoked 471 certificates and implemented a fix on June 15, 2020, ensuring no new certificates with this problem were issued. They are conducting ongoing audits to prevent recurrence.
Chronology
- Identified the issue with document validity dates.
- Revoked 471 certificates.
- Implemented system fix.
Participants
Daniela Hood
Paul Steinberg
Ben Wilson
External References
Similar Local Cases
GoDaddy: Agreed-Upon Website Domain Validation Method Issue
GoDaddy: Failure to revoke certificate with compromised key within 24 hours
GoDaddy: OV Documentation Reuse
GoDaddy: Certificates issued with validity periods greater than 398-days
GoDaddy: Expired CRLs
KIR S.A.: DV certificates with locality name, organization name and stateOrProvinceName
QuoVadis: Failure to provide a preliminary report within 24 hours.
GoDaddy: CA Certificates with HTTPS URL in AIA Field