Spotify let Megaphone's SSL certificate lapse — top podcasts went dark for eight hours

At 8PM ET on May 30, 2022, the SSL certificate on Megaphone — the podcast hosting and dynamic-ad-insertion platform Spotify acquired in December 2020 for $235 million, its biggest podcasting purchase — expired, and no one renewed it. For more than eight hours, clients could not reach the Megaphone CMS and listeners could not download episodes from Megaphone-hosted publishers, among them many of the industry's top shows, distributed not just on Spotify but on Apple Podcasts and Google Podcasts.

The certificate was a pre-acquisition artifact: Megaphone secured it for two years in May 2020, seven months before Spotify's purchase and just before the industry standard capped certificates at 13 months. The outage was not fixed until just before 6AM ET on May 31, and delays with the Megaphone CMS persisted until the company declared the issue fully resolved at 9:45AM. Spotify, per The Verge, did not comment on why the certificate was left to expire or why the fix took so long.

The costs landed on the platform's customers. Podcaster Luke Braun, who hosts Locked On Vikings and Locked On NFL, said the upload delay could cost his shows thousands of downloads across platforms, and with Megaphone down the only place he could post Tuesday's episode was YouTube, which accounts for about 20 percent of his audience. Spotify said it was reaching out to affected publishers; Megaphone service was eventually restored.

Eight hours of dead downloads for top shows across Spotify, Apple and Google apps; podcasters lost thousands of downloads to upload delays.

The certificate predated the acquisition, and when it expired in May 2022 there was no renewal in place on Spotify's side.

Megaphone sits at the center of Spotify's podcast ad-tech stack, so one expired credential stopped downloads — and dynamic ad insertion — for publishers across rival platforms too.

Restoration took eight hours rather than minutes, stretching a routine expiry into a industry-visible outage.

An acquired platform's ops debt becomes yours: the certificate predates the deal, but the outage lands on the new owner's brand.

Megaphone came back online just before 6AM ET on May 31, 2022, with the company reporting full resolution, including CMS delays, at 9:45AM. Spotify said it was contacting affected publishers. No regulatory action or compensation scheme was reported; Spotify went on integrating further acquisitions such as Podsights and Chartable into the platform.