Valid SSL on a scam URL

This is a scam site: https://www.acewarn.com
please, revoke the certificate.

Welcome to the Let's Encrypt Community :slightly_smiling_face:

9 Likes

Other that not being a CA job's to police what you put or not on your website (a DV certificate only validates that you're connecting to the right server for a given domain name), you might want to know that revoking a certificate doesn't do anything magical.

In order to notice the revocation, a browser must see there isn't any stapled OCSP response, so the browser must ask the OCSP responder directly, and most do not ask: pretty much only firefox and safari do by default.

6 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.