Auto-check delay in SSL renewals
ukuser said 1 year, 1 month ago:
I tried to renew a customers SSL today and received the following message.
“Our auto-check recognized copyrighted, trademarked, or phishing-related words in the distinguished name.”
I called support and after a long wait got told that th people dealing with it would not be in for 2 hours. After 2 hours I called to be told they were there but it would not be sorted for another hour (at least).
The certificate was a renewal of an existing GoDaddy certificate, NOT a new one. When I paid to renew there was no warning this would take hours to renew.
It’s bank holiday monday here in the UK and I’ve wasted 3 hours (maybe more to come) waiting to do the simple job of renewing a customers certificate that should take 5 mins.
GoDaddy. You may want to consider placing a warning next to certificates that you don’t want to renew warning of the delay for people to see BEFORE they initiate the process, or simply let the support team who are available and take the calls to renew the certificates.
mike42 said 1 year, 1 month ago:
@ukuser,
The delay you ran inten is done if our system recognizes any copyrighted, trademarked, or phishing-related words in the distinguished name. When that happens, our Policy Authority Committee must review the request before the issuance of the certificate can proceed.
Thanks for your feedback on the possible warning we could add. I will pass this along to the appropriate department.
–Mike
freakyash said 11 months, 4 weeks ago:
Hi Mike. Your response does not tell me anything that the certificate manager says already. What exactly is the distinguished name, what constitutes a phishing related word? My organisation is LABC Acoustics, how would that be considered phishing or someone else’s trademark?
I agree there is no reason why this check can’t be done BEFORE the process is initiated so we can budget for this additional time wastage or perhaps receive some advice to change our DN to something that won’t cause a hold up.
timb said 11 months, 3 weeks ago:
@freakyash
The web server you generate your CSR for uses information you provide regarding your organization to create the Distinguished Name which will uniquely identify individual servers. For detailed information on what the Distinguished Name contains, you can check out this help article:
Generating a Certificate Signing Request
Tim B
0 min expected wait time