I’ve posted an article about the current state of X.509 revocation on the internet over at the Spiderlabs blog. Check out Defective By Design? - Certificate Revocation Behavior In Modern Browsers!