https://www.computerworld.com/article/2897815/microsoft-blacklists-fraudulently-issued-ssl-certificate.html https://www.computerworld.com/article/2897815/micros

https://www.computerworld.com/article/2897815/microsoft-blacklists-fraudulently-issued-ssl-certificate.html https://www.computerworld.com/article/2897815/microsoft-blac... To be more clear a malicious website can rely on fraudulently issued certificates to validate a spoofed domain. This is a bad cert that appears to be valid and establishes the same level of trust. That is why revocation lists and OCSP are necessary.