Head of Let&#x27;s Encrypt here.<p>We were aware of the &quot;google.com.mg&quot; cert soon after it was issued. We didn&#x27;t revoke the cert for the same reason we don&#x27;t revoke most certs: as far as we can tell, the cert was issued to the entity properly controlling &quot;google.com.mg&quot;. Whether or not that is Google (the company) is not really within our purview.<p>That said, in this case, as a courtesy, we did notify Google employees and made the decision to report the site to Google Safe Browsing. GSB and SmartScreen are the right places to deal with things like this.<p>IIRC GSB did block the site for a while, but that block seems to be gone now.