https://blog.schertz.name/2011/05/revoked-lync-server-certificates/