> Currently, we are only revoking the certificates if we received the private keys. There are additional certificates the reseller requested to have revoked,

> Currently, we are only revoking the certificates if we received the private keys. There are additional certificates the reseller requested to have revoked, but DigiCert has decided to disregard that request until we receive proof of compromise or more information about the cause of this incident. I feel like given Trustico's behavior and the fact they already emailed 23k private keys to Digicert, I would just be conservative and revoke them all. Why leave the other ~25k keys when Trustico has specifically stated they are compromised?