We have purchased 2 SSL UCC certificates from GoDaddy a few months ago for something like myandy.com and myandy.com.au, and I had defined the following Subject Alternative Names:
- x ...
They all got approved and in production for a few months.
A few weeks ago, I got an Email from Godaddy stating "Your certificate will be revoked if you do not take action to remove the new gtld domain from the certificate.". Since the Email did not mention which part of the certificate was wrong, and overall looks like a Spam, I ignored it.
2 weeks later the SSL certificate of myandy.com got revoked, so I asked GoDaddy what exactly was wrong in the certificate, and finally GoDaddy had clarified:
The issue lies with the SAN [SERVICES].
You had certificate that contained a Common Name that is solely SERVICES. This is a valid Top Level Domain (gTLD) listed with The Internet Assigned Numbers Authority (IANA) for external use. All valid domains must be authenticated by the holder of the domain before they can be issued.
For a complete Database of Top Level Domains managed by IANA please visit the link below.
As this is the gTLD and there is no possibility to register with the .SERVICES registry for a blank domain, the SAN was required to be removed and/or replaced with a different local name that does not have a listing in IANA or a fully qualified domain to avoid revocation.
However, the whole thing is looking strange to me.
I had some services running on services.myandy.com. Then later IANA releases some new Top Level Domain as documented at http://www.iana.org/domains/root/db, so I could not use Services as my subdomain anymore?
If this is true, tv.channel7.com can not be used anymore unless tv.channel7.com gets authenticated by the holder of channel7.tv before the certificate issued; or even the certificate had been issued, the certificate will be revoked because of the newly released top level domains?
If I am using X.myandy.com, then IANA release a new gTLD, then I will not be able to use X.myandy.com?
Though Godaddy has raised the SAN vs gTLD issue with myandy.com, they did not do the same against myandy.com.au, which has the same SAN called Services. Did they hand pick randomly against myandy.com? (myandy.com and myandy.com.au are all registered in cheapdomains.com.au).