GoDaddy CCADB missing partitioned CRL URL disclosure and remediation tracking
This case concerns GoDaddy’s failure to disclose a partitioned CRL URL in CCADB for the intermediate certificate “GoDaddy TLS Intermediate CA DV – R1v1.” GoDaddy said the missing URL was http://crl.godaddy.com/gdr1v1dv_s1-13.crl, and that the omission put it out of compliance with CCADB Policy Section 6.2 after the first revocation containing that URL. GoDaddy stated that it corrected the CCADB entry on 2026-08-24 after receiving a Certificate Problem Report on 2026-08-24. Since then, the thread has tracked remediation work: monitoring and alert escalation was completed on 2026-09-18, and CCADB API access for automated disclosure updates was completed on 2026-09-23. The remaining action item is automation of partitioned CRL URL disclosures in CCADB, which GoDaddy said was still ongoing and for which it requested the next update date be set to 2026-10-30. The bug remains assigned to GoDaddy and was still being discussed on 2026-10-02.
- A partitioned CRL URL was first published and then first used in a revocation, starting the CCADB disclosure deadline.
- GoDaddy became out of compliance with CCADB Policy Section 6.2 because the CRL URL had not been disclosed in CCADB within four hours of the first revocation.
- A Certificate Problem Report alerted GoDaddy to the missing partitioned CRL disclosure.
- GoDaddy updated CCADB to include the missing CRL partition disclosure.
- GoDaddy completed the monitoring and alert-escalation action item for CRL partition utilization.
- GoDaddy completed the CCADB API access action item; automation remains ongoing.
- GoDaddy — Steven Deitte opened the bug with a preliminary incident report describing the missing partitioned CRL URL in CCADB and citing CCADB Policy 6.2.
- GoDaddy — Rob White filed the full incident report, confirmed the CPR trigger, gave the timeline, and said the CCADB disclosure was corrected.
- GoDaddy — Rob White said GoDaddy remained on target with the CRL partition monitoring and alert escalation action item and had corrected a related CCADB API access request to match current guidance.
- GoDaddy — Rob White reported that GoDaddy completed the monitoring and alert-escalation action item and that automation of partitioned CRL URL disclosures remains ongoing.
- GoDaddy — Rob White said GoDaddy completed the CCADB API access action item and requested the next update date be set to 2026-10-30 for the remaining automation work.
- Community commenter — Wayne noted that the next update field had not been updated and said an update was due that day.
- GoDaddy — Steven Deitte said GoDaddy was still on track with the remaining action item and again requested the next update date be set to 2026-10-30.