Hacker News Reader

Imagine if Gogo gets compromised and that cert is stolen. Suppose it will end up on a CRL or just quietly replaced?

It wouldn't matter, the certificate is signed by Gogo so isn't valid by default on anyone's devices.