Seems like the browser should at least give a warning if it thinks the cert was revoked. You can see the green padlock AND the revocation in Chrome. http://s27

Seems like the browser should at least give a warning if it thinks the cert was revoked. You can see the green padlock AND the revocation in Chrome. http://s27.postimg.org/6cub79gbn/Screen_Shot_2014_04_13_at_10_19_21_PM.png http://s27.postimg.org/6cub79gbn/Screen_Shot_2014_04_13_at_1... or through: openssl s_client -connect revoked.grc.com:443 I mean from an end user perspective - irrespective of google's stance on revoked certs - it's very unexpected that the browser info about the cert is that it is revoked but the padlock is green --- oh okay, as some of the other comments points out, this puts it into some perspective: https://www.imperialviolet.org/2012/02/05/crlsets.html https://www.imperialviolet.org/2012/02/05/crlsets.html --- In Safari it won't let me get to the page w/o dire warnings.