How certificate revocation (doesn’t) work in practice
news.netcraft.com