They could give them one month or even three months so their client have time to get their certs replaced, that's not terribly important. But in a broader sense

They could give them one month or even three months so their client have time to get their certs replaced, that's not terribly important. But in a broader sense, yes, they were compromised - they had an entity vouch for them that apparently vouched with a blank cheque.