> As for refund issues, that's a problem for the cert issuer to deal with.

no, it's your problem, as it's your brand slapped over everything, and now you've got tens of thousands of innocent people angry that you've revoked the IDs they paid for in good faith

this would translate into lawsuits, against you