My very naive reading is Alegeus may have assumed this certificate revocation would only be from their own screw up - such as publishing their private key somew

My very naive reading is Alegeus may have assumed this certificate revocation would only be from their own screw up - such as publishing their private key somewhere - and they would of course eat some costs on the SLA’s. Instead, we have Alegeus’s vendor saying there was technically the possibility, unconfirmed, that the key could have been compromised, and therefore are executing the nuclear option.