All defunct cases should be simply "bad", as they will fall back to some generic cert anyways.(their respective old certs served now correctly)
However… Would it make sense to either mention that the subdomains no longer exhibit what was intended in their actual page content too? Maybe by changing from red&orange to grey and updating "expires at" to "expired at"? If there's an agreed upon way of doing so I'd happily update them to show they're now defunct in their text itself too.
All defunct cases should be simply "bad"
, as they will fall back to some generic cert anyways.(their respective old certs served now correctly)However… Would it make sense to either mention that the subdomains no longer exhibit what was intended in their actual page content too? Maybe by changing from
red&orangetogreyand updating "expires at" to "expired at"? If there's an agreed upon way of doing so I'd happily update them to show they're now defunct in their text itself too.