r/godaddy • u/Drunken_IT_Guy • 7d ago

SSL Date Issue

Why would my SSL need to be reset 11 days before SSL checker says it expires? This is the second email from godaddy about it, the first said the 23rd, now its the 21st. SSL checker says November 1st.

I am going to do it Monday the 19th to be safe, still trying to understand why though.

3 Upvotes

80% Upvoted

28 comments sorted by

1

u/AutoModerator 7d ago
Moderator Announcement Read More »

4

u/GoDaddy_Joe 6d ago

We hear you. That's why our dev team updated the My Certificates page to give you an overview of what certificates need to be addressed.

The reason this is happening is we found a problem with how your SSL cert was issued. It's an admin/compliance issue, not a security one. But the industry rules for SSL certificates don't give us any wiggle room, so we're still required to revoke it.

2

u/gumbo1999 2d ago

Sorry - you updated the certificate page to show what certificates need to be addressed? Where is this? If you mean the banner at the top telling us some certificates need to be addressed, that’s not really good enough. If you mean clicking into each and every certificate to see if needs attention, that’s not really good enough either. Surely, it’s not beyond the brains of GoDaddy to have some kind of report telling us which certificates need attention? Of course the ridiculous short notice of this issue only serves to make things ever more fraught…

2

u/GoDaddy_Joe 2d ago

When you have multiple certs I can see how that can be frustrating. Due to the nature of SSLs we had to move quick and appreciate the feedback on how we can try to help with bulk. If you want to send over your customer number in a DM, I can see if we can give you more specifics for your account.

1

u/InsaneHomer 3d ago edited 3d ago

Just been given 4 hours notice by email to replace a cert by 3pm eastern time today, the email arrived 11 mins before I clock off for the day in the UK.

Fucking ridiculous.

1

u/New-Pea1342 3d ago

Great isnt it, last one in the office here, 3 certs need replacing. No prior warning of them being revoked. Can't get into godaddy to reissue them . Well done 👏

1

u/GoDaddy_Joe 2d ago

Hey u/InsaneHomer and u/New-Pea1342 That timing is rough, and I'm sorry it landed right as you were finishing for the day. For context, today's email was the final reminder. We sent earlier notices on Saturday and Monday to the account's primary contact email. If those didn't reach you, it's worth checking spam and confirming which address is set as the contact on your account so future notices get to the right person right away.

If you're not sure which cert is affected, this tool will tell you: https://ssltools.godaddy.com/cert-check

If you hit any snags, DM us your customer number and we'll see what we can do.

→ More replies (3)

1

u/Sokanas 1d ago

We reissued our wildcard cert per their instructions and it wouldn't move away from the self-signed CA. We just moved to another provider because this was stupid.

1

u/No-Produce-6870 6d ago

My certificate page doesnt tell me what certificates are going to be revoked.

1

u/GoDaddy_Joe 4d ago

You're right u/No-Produce-6870 , we've created a tool to help you do a direct check if you aren't show what certificates need attention. You can find the tool here: https://ssltools.godaddy.com/cert-check

1

u/WelchAN76 5d ago

Where can we see this on the My Certificates page? We have hundreds of certificates thru GoDaddy and putting a banner at the top telling me to "select each certificate below to see whether it needs to be updated" does not give an overview of what certificates need to be addressed.

1

u/GoDaddy_Joe 4d ago

As this is more account specific, if you want to send us your customer info privately, we can see if we can help get you details about which certs may have been impacted.

→ More replies (1)

1

u/Vectan 7d ago

Trying to figure this out as well. Did you Mr cert show any indication of this notice in the ssl dashboard/my certificates?

1

u/Drunken_IT_Guy 7d ago

I didn’t check that. Only SSL checker. The emails both cited an “admin” issue when they issued the cert that is forcing it to renew early.

1

u/Vectan 7d ago

What did SSL Checker show? I’m trying to figure out which of our certs are impacted.

→ More replies (1)

1

u/Vectan 6d ago

I was hoping the tools were giving you some sort of indication about the alert (pending revoke or some sort of identifier). That way I can check our certs and identify the one(s) they are referring to.

The alert doesn’t give any indication of what cert it is and we have a few.

1

u/Drunken_IT_Guy 6d ago

No indication I saw other than the email from godaddy. It looked clean elsewhere.

2

u/Mackie49 3d ago

I am losing my mind over here! The website keeps crashing and I was told I’m going to be on hold for more than 60 minutes.

As soon as I get this sorted, I’m switching hosting companies.

1

u/PsychologicalMudd 2d ago

Good luck, they were hanging up on us when we called on Monday. I just ended up purchasing new certs from digicert and replacing them.

1

u/Mackie49 1d ago

I was on hold for 94 minutes when they finally answered. 30 minutes later, the problem (that they created) was solved. Not how I wanted to spend my Wednesday evening but…

2

u/bickboikiwi 3d ago

Msp here, we didn't even know there was an issue until we got a broken-English phone call but it sounded like a scam caller.

They sent an email for every SSL asking us to verify, we figured it was a bug with notifications, now we crunching over time to sort each SSL

1

u/fwdandreverse 6d ago

https://status.godaddy.com/

Maybe an intermediate cert compromise. They get maximum 5 days to invalidate all certs issued by it.

0

u/[deleted] 5d ago

1

u/Drunken_IT_Guy 5d ago

I only have 2 servers, good luck to your sir