Second wave of restrictions: GlobalSign revokes TLS certificates from Gazprombank, Rosneft, and other companies

On June 18 at 17:15 GlobalSign — the Japanese CA — initiated a second wave of forced revocations of TLS certificates for Russian organizations hit by international sanctions. About 310 domains tied to 44 major companies were affected; among the names flagged are Rosneft, Gazprombank, Alrosa, VEB.RF, UAC and Positive Technologies.

The immediate trigger: new, stricter CA/Browser Forum rules that require certification authorities to enforce international sanctions lists (e.g., US and EU). In practice this narrows the discretion CAs have over revocations, so certificates can be revoked even when operators contest the measures or when downstream effects are significant.