GoDaddy: OV Documentation Reuse

RESOLVED FIXED GoDaddy

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

GoDaddy disclosed a compliance issue involving the issuance of 36 Organization Validated (OV) certificates that reused documentation older than the allowed 825 days, violating CA/B Forum Baseline Requirements. The issue was identified during a 3% certificate audit on March 8, 2022, when a bug in the code was discovered that allowed this reuse. GoDaddy revoked all impacted certificates by March 9, 2022, and updated their application configuration to prevent future occurrences. The CA has since completed a code fix and validation linter review to enhance compliance checks.

Model: gpt-4o-mini Generated: 2026-06-13 21:29 UTC Revised: 2026-06-16 18:48 UTC Confidence: 0.90 15 comments

Chronology

2022-03-08 GoDaddy's RA team identifies a compliance issue during a 3% certificate audit.
2022-03-09 All impacted certificates are revoked.
2022-05-02 GoDaddy deploys a fix and re-enables documentation reuse.

Thread Activity

2022-03-17 GoDaddy — GoDaddy acknowledges the compliance issue and outlines the timeline of actions taken.
2022-03-21 GoDaddy — GoDaddy provides an update on the incident report and additional impacted certificates.
2022-06-03 GoDaddy — GoDaddy confirms completion of all action items related to the compliance issue.
2022-06-04 Mozilla representative — Mozilla closes the bug as complete.

Participants

GoDaddy Community commenter Mozilla representative

External References

Original Bugzilla Case

Similar Local Cases

#1731939 RESOLVED Self Reported Incident Opened 2021-09-22 · Closed 2023-02-22 · 66% similar

GoDaddy: Issued EV Wildcard Certificate

AI Summary CA Owner

#1645832 RESOLVED Ca Certificate Compliance Opened 2020-06-15 · Closed 2023-02-22 · 62% similar

GoDaddy: Expired CRLs

AI Summary CA Owner

#1734265 RESOLVED Self Reported Incident Opened 2021-10-06 · Closed 2023-02-22 · 61% similar

GoDaddy: Root CRLs exceed maximum validity period by 1 second

AI Summary CA Owner

#1909948 RESOLVED Incident Opened 2024-07-25 · Closed 2024-10-31 · 57% similar

GoDaddy: Edge Case for Data Reuse Outside of Timeframes

AI Summary CA Owner

#1904749 RESOLVED Certificate Misissuance Opened 2024-06-26 · Closed 2024-10-31 · 56% similar

GoDaddy : CAA checks passed when records contained incorrect variants of godaddy.com or starfieldtech.com

AI Summary CA Owner

#1605804 RESOLVED Self Reported Incident Opened 2019-12-24 · Closed 2023-02-22 · 55% similar

GoDaddy: Domain Validation Reuse Issue

AI Summary CA Owner

#1462844 RESOLVED Self Reported Incident Revocation Issue Opened 2018-05-19 · Closed 2023-02-22 · 53% similar

GoDaddy: Improper DER results in failure to comply with RFC 5280 - Invalid characters in PrintableString

AI Summary CA Owner

#1484766 RESOLVED Self Reported Incident Revocation Issue Security Incident Opened 2018-08-20 · Closed 2024-06-30 · 53% similar

GoDaddy: Random Value Vulnerability in Domain Validation Method

AI Summary CA Owner