GoDaddy: Precertificates incorrectly logged to DigiCert SCT Logs

GoDaddy reported an incident involving 5079 precertificates that were incorrectly logged to DigiCert SCT logs, violating Apple's Certificate Transparency policy. The issue stemmed from bugs in GoDaddy's CT logic and the CT logs, resulting in valid SCT signatures being embedded on certificates from incorrect temporal CT logs. Although the affected certificates did not meet the minimum SCT log entry requirements, they were still BR-compliant. The case was ultimately marked as invalid, with no compliance violation found.

1. 2025-05-30 Non-compliance identified
2. 2025-06-03 GoDaddy deployed patches to address the issue
3. 2025-07-28 Additional checks for SCT validation logic completed