GoDaddy Revokes Over 400,000 SSL Certificates
The company removed hundreds of thousands of certificates that failed to meet established security policy standards.
Updated on Oct. 22, 2026 in Cybersecurity
Live Poll
Do you trust companies to handle your digital security requirements without significant compliance failures?
GoDaddy has executed a mass revocation of 404,607 SSL/TLS certificates after discovering they did not align with published certificate policies. The company completed this significant security cleanup following a missed deadline for the mandatory revocation.
Why it matters
The revocation ensures that all active website security credentials adhere to verified industry standards, protecting users from potential vulnerabilities. Maintaining consistent certificate policies is a fundamental requirement for digital trust and secure web communication.
GoDaddy identified and revoked 404,607 individual SSL/TLS certificates that failed to match mandatory certificate policies. The action was required to bring the company’s infrastructure back into compliance with security protocols.
The players
GoDaddy
GoDaddy is a global internet domain registrar and web hosting company that provides infrastructure services to millions of websites.
The details
GoDaddy conducted the mass revocation process to purge non-compliant security files from its systems. This action ensures that the affected domains maintain proper encryption standards as required by current technical regulations.
Timeline
October 21, 2026: GoDaddy completed the revocation of all non-compliant certificates.
The Tech Race
This mass revocation underscores the ongoing challenge for major infrastructure providers to maintain automated compliance with the CA/Browser Forum Baseline Requirements. It highlights the shift toward more rigorous, real-time auditing of security credentials across the global web ecosystem.
Website administrators who rely on GoDaddy should verify their site security to ensure their certificates remain valid and active. Failure to check current status could result in browser warnings for visitors accessing affected domains.
The takeaway
Maintaining up-to-date security certificates is vital for protecting user data and preventing site accessibility issues. Developers should regularly audit their infrastructure to ensure it remains in compliance with evolving security policies.
Further reading
Learn more about the latest developments in Cybersecurity.
Live Poll
Do you trust companies to handle your digital security requirements without significant compliance failures?
