I downloaded the CRL for developer certificates [1] and quickly looked at it using grep: grep -E "Revocation Date: Jul 17 .{8} 2013" wwdrccrl.txt | wc -l

I downloaded the CRL for developer certificates [1] and quickly looked at it using grep: grep -E "Revocation Date: Jul 17 .{8} 2013" wwdrccrl.txt | wc -l 3065 grep -E "Revocation Date: Jul 18 .{8} 2013" wwdrccrl.txt | wc -l 2289 grep -E "Revocation Date: Jul 19 .{8} 2013" wwdrccrl.txt | wc -l 2 grep -E "Revocation Date: Jul 20 .{8} 2013" wwdrccrl.txt | wc -l 0 grep -E "Revocation Date: Jul 21 .{8} 2013" wwdrccrl.txt | wc -l 0 These are the two certificates that were revoked on the 19th grep -A 3 -B 1 -E "Revocation Date: Jul 19 .{8} 2013" wwdrccrl.txt Serial Number: 2628C7F90970D227 Revocation Date: Jul 19 03:14:04 2013 GMT CRL entry extensions: X509v3 CRL Reason Code: Key Compromise -- Serial Number: 1A51ABFA4844BD45 Revocation Date: Jul 19 03:24:03 2013 GMT CRL entry extensions: X509v3 CRL Reason Code: Key Compromise To generate the wwdrccrl.txt file I used: openssl crl -inform DER -text -noout -in wwdrca.crl > wwdrccrl.txt Just to be clear -- every entry there I see lists the reason as Key Compromise, just interesting that they usually seem to revoke at least 2000 certificates a day but suddenly stopped on the 19th with just revoking 2. [1]http://www.apple.com/certificateauthority/ http://www.apple.com/certificateauthority/