← GoDaddy cases
Bugzilla #1949895
Certificate Problem Report
GoDaddy: Delayed CRL File Updates
RESOLVED
FIXED
GoDaddy
AI Summary
GoDaddy experienced a delay in updating Certificate Revocation Lists (CRLs) due to a server configuration change that occurred on February 17, 2025. This issue resulted in 7899 certificate revocations not being updated within the required 24-hour timeframe, violating compliance standards. The problem was identified on February 19, 2025, and resolved the same day. A full incident report was published detailing the root cause and corrective actions taken to prevent future occurrences.
Chronology
- Configuration change made on servers responsible for syncing CRL files.
- Issue identified and resolved, allowing CRL files to be synced.
Participants
Steven Deitte
Malcolm Doody
Mozilla Team
External References
Similar Local Cases
GoDaddy: Missing R1 Intermediate Full CRL URLs in CCADB
GoDaddy: Delayed revocation
GoDaddy: Partitioned CRL files missing Issuing Distribution Point
GoDaddy: CRL Disclosure in CCADB Mismatch with Issued Certificates
GoDaddy: CA Certificates Published in PEM format
GoDaddy: CA Certificates with HTTPS URL in AIA Field
GoDaddy: Precertificates incorrectly logged to DigiCert SCT Logs
GoDaddy: Certificates with invalid embedded SCT signatures