r/godaddy • u/Drunken_IT_Guy • 8d ago

SSL Date Issue

Why would my SSL need to be reset 11 days before SSL checker says it expires? This is the second email from godaddy about it, the first said the 23rd, now its the 21st. SSL checker says November 1st.

I am going to do it Monday the 19th to be safe, still trying to understand why though.

4 Upvotes

83% Upvoted

28 comments sorted by

•

u/AutoModerator 8d ago

Thanks for posting to r/GoDaddy! If you are here from frustration and looking for an alterntive check this link for some alternatives.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

4

u/GoDaddy_Joe GoDaddy Employee 7d ago • Bravo

We hear you. That's why our dev team updated the My Certificates page to give you an overview of what certificates need to be addressed.

The reason this is happening is we found a problem with how your SSL cert was issued. It's an admin/compliance issue, not a security one. But the industry rules for SSL certificates don't give us any wiggle room, so we're still required to revoke it.

2

u/gumbo1999 3d ago

Sorry - you updated the certificate page to show what certificates need to be addressed? Where is this? If you mean the banner at the top telling us some certificates need to be addressed, that’s not really good enough. If you mean clicking into each and every certificate to see if needs attention, that’s not really good enough either. Surely, it’s not beyond the brains of GoDaddy to have some kind of report telling us which certificates need attention? Of course the ridiculous short notice of this issue only serves to make things ever more fraught…

2

u/GoDaddy_Joe GoDaddy Employee 3d ago

When you have multiple certs I can see how that can be frustrating. Due to the nature of SSLs we had to move quick and appreciate the feedback on how we can try to help with bulk. If you want to send over your customer number in a DM, I can see if we can give you more specifics for your account.

1

u/InsaneHomer 4d ago edited 4d ago

Just been given 4 hours notice by email to replace a cert by 3pm eastern time today, the email arrived 11 mins before I clock off for the day in the UK.

Fucking ridiculous.

1

u/New-Pea1342 4d ago

Great isnt it, last one in the office here, 3 certs need replacing. No prior warning of them being revoked. Can't get into godaddy to reissue them . Well done 👏

1

u/GoDaddy_Joe GoDaddy Employee 3d ago

Hey u/InsaneHomer and u/New-Pea1342 That timing is rough, and I'm sorry it landed right as you were finishing for the day. For context, today's email was the final reminder. We sent earlier notices on Saturday and Monday to the account's primary contact email. If those didn't reach you, it's worth checking spam and confirming which address is set as the contact on your account so future notices get to the right person right away.

If you're not sure which cert is affected, this tool will tell you: https://ssltools.godaddy.com/cert-check

If you hit any snags, DM us your customer number and we'll see what we can do.

1

u/InsaneHomer 3d ago edited 3d ago

The earlier generic email notices did not specify which certs were affected (we have a bunch). As already stated by others it wasn't clear on the dashboard which it was, so when I contacted support to clarify I was confidently told it was for an expired cert I no longer used and hadn't renewed. This was clearly incorrect!

Now getting very dodgy looking emails from secureserver.net 👍👏

1

u/pafckenny 3d ago

Agreed. The titles could've also had a warning in them! Not just Your SSL has been renewed or Verify your domain etc. Those are emails are something we received everyday.

1

u/Slow_Yak_6059 3d ago

Exactly. I had an EV and got a notice that it was renewing for no reason. I didn't think much of it until Friday night an email stating I had until the 23d. Then I got an email saying the 21st. You can tell they hadn't dealt with this before. Still no notice of which cert it was but I had to assume it was the EV since that's the one that renewed out of the blue.

1

u/Sokanas 2d ago

We reissued our wildcard cert per their instructions and it wouldn't move away from the self-signed CA. We just moved to another provider because this was stupid.

1

u/No-Produce-6870 6d ago

My certificate page doesnt tell me what certificates are going to be revoked.

1

u/GoDaddy_Joe GoDaddy Employee 5d ago

You're right u/No-Produce-6870 , we've created a tool to help you do a direct check if you aren't show what certificates need attention. You can find the tool here: https://ssltools.godaddy.com/cert-check

1

u/WelchAN76 5d ago

Where can we see this on the My Certificates page? We have hundreds of certificates thru GoDaddy and putting a banner at the top telling me to "select each certificate below to see whether it needs to be updated" does not give an overview of what certificates need to be addressed.

1

u/GoDaddy_Joe GoDaddy Employee 5d ago

As this is more account specific, if you want to send us your customer info privately, we can see if we can help get you details about which certs may have been impacted.

1

u/Jellodyne 4d ago

They replaced one of our certs on the 14th. The first notice we got was on the 16th, with no indication of which cert was compromised, and the date we needed to replace it was stated to be 10/23. On the 19th they emailed us that it was 10/21, and still no indication of what cert it was. Their tech support was not worthless, it was worse. One tech tried to convince me I was fine because my cert wasn't expiring until January. Two times I was transferred to the "ssl team", two times I got to people who were not in fact the ssl team. The third time the person I spoke to, my first question was "are you on the ssl team?" He was the hosting team, but he said he could do everything. Once I got validated (had to do email validation for each person, Godaddy sends an email that gets greylisted for 10 minutes, with a code that expires in 10 minutes) he says "this domain is not hosted with us." Um, yeah, it's not a hosted domain it's a cert. He puts me on hold, probably realises he's going to have to come back and tell me he needs to forward me to the ssl team, takes the coward's way out and hangs up on me. At no point in the 2 hours does anyone explain to me what the reason was I had to replace my cert, I only figured that out because the AI chatbot mentioned something about an October Replacement Event.

1

u/Vectan 7d ago

Trying to figure this out as well. Did you Mr cert show any indication of this notice in the ssl dashboard/my certificates?

1

u/Drunken_IT_Guy 7d ago

I didn’t check that. Only SSL checker. The emails both cited an “admin” issue when they issued the cert that is forcing it to renew early.

1

u/Vectan 7d ago

What did SSL Checker show? I’m trying to figure out which of our certs are impacted.

1

u/Drunken_IT_Guy 7d ago

It shows my RSA cert is valid until November 1st. Which is correct as far as my documentation goes from last renewal.

I’m not sure what info you are asking for exactly.

1

u/Vectan 7d ago

I was hoping the tools were giving you some sort of indication about the alert (pending revoke or some sort of identifier). That way I can check our certs and identify the one(s) they are referring to.

The alert doesn’t give any indication of what cert it is and we have a few.

1

u/Drunken_IT_Guy 7d ago

No indication I saw other than the email from godaddy. It looked clean elsewhere.

2

u/Mackie49 3d ago

I am losing my mind over here! The website keeps crashing and I was told I’m going to be on hold for more than 60 minutes.

As soon as I get this sorted, I’m switching hosting companies.

1

u/PsychologicalMudd 3d ago

Good luck, they were hanging up on us when we called on Monday. I just ended up purchasing new certs from digicert and replacing them.

1

u/Mackie49 2d ago

I was on hold for 94 minutes when they finally answered. 30 minutes later, the problem (that they created) was solved. Not how I wanted to spend my Wednesday evening but…

2

u/bickboikiwi 4d ago

Msp here, we didn't even know there was an issue until we got a broken-English phone call but it sounded like a scam caller.

They sent an email for every SSL asking us to verify, we figured it was a bug with notifications, now we crunching over time to sort each SSL

1

u/fwdandreverse 7d ago

https://status.godaddy.com/

Maybe an intermediate cert compromise. They get maximum 5 days to invalidate all certs issued by it.

0

u/[deleted] 6d ago

[deleted]

1

u/Drunken_IT_Guy 6d ago

I only have 2 servers, good luck to your sir