Had to revoke some certs, now I'm stuck

Revocation is often not accompanied by creation of replacement certificates by the controller of the revoked certificates.

This is the case with:

  • decommissioning hosting instances
  • releasing control of domain names