It's really a shame that there's still no good way to revoke a certificate [0].<p>Mozilla has been discussing it for years [1] but an implementation or even a chosen direction is far from reality.<p>[0] <a href="http://www.rfcreader.com/#rfc7525_line799" rel="nofollow">http://www.rfcreader.com/#rfc7525_line799</a><p>[1] <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=901698" rel="nofollow">https://bugzilla.mozilla.org/show_bug.cgi?id=901698</a>