[schoen]

Note that you can also report it to the issuing CA if the vendor doesn't take action, and the CA will revoke the certificate.