Looks like they did actually use outdated keys (certificate.revocationcheck.com) which were revoked in August last year.
Looks like [they did actually use outdated keys](https://certificate.revocationcheck.com/alternativeafrica.com) which were revoked in August last year.
(post is archived)