GoDaddy Revokes Over 404,000 SSL Certificates Due to Policy Violations
Article Content
- •GoDaddy revoked 404,607 SSL certificates due to policy violations.
- •The revocation affects numerous websites, including those of the Government of Gibraltar.
- •Website owners are advised to replace affected certificates to avoid security warnings.
On October 21, 2026, GoDaddy revoked 404,607 SSL and TLS certificates after discovering they were issued in violation of their own policies. The discrepancies were identified in the certificate policy object identifiers and certification practice statements. Most affected certificates were domain-validation types, with significant numbers issued under the Starfield hierarchy. GoDaddy's failure to meet the CA/Browser Forum's revocation deadline has raised concerns, as only 170,566 certificates were revoked by the initial deadline. The revocation has impacted various websites, including those of the Government of Gibraltar, which confirmed that some of its sites were using the affected certificates. GoDaddy has advised website owners to check their accounts for flagged certificates and replace them promptly to avoid security warnings for users.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Starfield in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which types of certificates are affected?
What should website owners do?
Is this a security breach?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…