How certificate revocation (doesn’t) work in practice | Dark Hacker News