← GoDaddy cases
Bugzilla #1924992
Incident
GoDaddy: Does not provide a method for domain owners to revoke their certificates
RESOLVED
FIXED
GoDaddy
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
The case involves GoDaddy's lack of a clear method for domain owners to revoke their certificates. A user reported this issue, stating that the certificates were shared with other domains, complicating the revocation process. GoDaddy responded by referencing their Certificate Policy/Certification Practice Statement (CP/CPS), which outlines revocation procedures. They acknowledged the need for clarity in their documentation and committed to updating the language in their CP/CPS. The issue was resolved with the release of version 5.02 of their CP/CPS, which improved the clarity of the revocation process.
Chronology
- GoDaddy updated their CP/CPS to clarify certificate revocation practices.
Thread Activity
- Duck representative — Reported that GoDaddy does not provide a method for domain owners to revoke their certificates.
- GoDaddy — Responded that revocation options are defined in their CP/CPS.
- GoDaddy — Announced the completion of updates to the CP/CPS regarding revocation.
Participants
Duck representative
GoDaddy
Mozilla representative
Internet Security Research Group
Community commenter
External References
Similar Local Cases
GoDaddy: Revocation process is unusable due to contact address not accepting attachments
GoDaddy: Edge Case for Data Reuse Outside of Timeframes
GoDaddy: Insufficient serial number entropy
NAVER Cloud Trust Services: DV Certificate issued with improperly validated
PKIoverheid: Delayed S/MIME audit report for MoD PKIoverheid G3 CA
e-commerce monitoring GmbH: CRLs with mismatched issuer
Actalis: two CAs with the same CRLDP
Sectigo: Inadequate vulnerability scanning and patching