GoDaddy Revokes 404,607 SSL Certificates After Policy Errors
GoDaddy revoked over 400,000 SSL/TLS certificates after detecting internal policy errors, affecting government and commercial sites. The event underscores the importance of continuous third‑party certificate monitoring and audit‑ready evidence for compliance programs.
GoDaddy announced the revocation of 404,607 SSL/TLS certificates after discovering certificate‑policy errors in its issuance process, impacting a broad set of domains including Gibraltar government websites.
Why it matters for trust and compliance
The incident demonstrates why organizations must maintain continuous oversight of external certificate authorities and retain verifiable evidence of compliance to protect the trust chain.
Continuous monitoring of CA issuance and revocation provides real‑time evidence for audit readiness.
Embedding CA governance into third‑party risk programs ensures policy compliance across the supply chain.
Who is affected
Government portalsE‑commerce platformsSaaS providersAny organization using GoDaddy‑issued SSL certificates
Recommended actions
Create an inventory of all certificates issued by GoDaddy and verify their current status.
Replace any revoked certificates immediately to restore TLS connectivity.
Implement automated certificate‑monitoring that logs issuance, renewal, and revocation events for audit trails.
Add CA policy compliance checks to your third‑party risk management framework.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.