GoDaddy CCADB disclosure failure for partitioned CRL URL
This case concerns GoDaddy’s failure to disclose a partitioned CRL URL in CCADB for the intermediate certificate “GoDaddy TLS Intermediate CA DV – R1v1.” GoDaddy said the missing URL was http://crl.godaddy.com/gdr1v1dv_s1-13.crl, and that the omission put it out of compliance with CCADB Policy Section 6.2 after the first revocation containing that URL. The issue was identified when GoDaddy received a Certificate Problem Report on 2026-08-24. GoDaddy stated that it corrected the CCADB entry on 2026-08-24 and that the disclosure issue has since been resolved. The company also said the problem was limited to a CCADB disclosure issue and did not involve certificate misissuance or issuance stoppage.
- A partitioned CRL URL was first published and then first used in a revocation, starting the CCADB disclosure deadline.
- GoDaddy became out of compliance with CCADB Policy Section 6.2 because the CRL URL had not been disclosed in CCADB within four hours of the first revocation.
- A Certificate Problem Report alerted GoDaddy to the missing partitioned CRL disclosure.
- GoDaddy updated CCADB to include the missing CRL partition disclosure.
- GoDaddy — Steven Deitte opened the bug with a preliminary incident report describing the missing partitioned CRL URL in CCADB and citing CCADB Policy 6.2.
- GoDaddy — Rob White filed the full incident report, confirmed the CPR trigger, gave the timeline, and said the CCADB disclosure was corrected.