Mozilla should probably add &#x27;charging for revocation&#x27; to their list of problematic practices (required to be included in Firefox). Not that revocating compromised certificates isn&#x27;t already required, but just that some behavior by poor CAs needs to be explicitly pointed out: <a href="https:&#x2F;&#x2F;wiki.mozilla.org&#x2F;CA:Problematic_Practices" rel="nofollow">https:&#x2F;&#x2F;wiki.mozilla.org&#x2F;CA:Problematic_Practices</a>