- Japanese certificate authority GlobalSign revoked TLS certificates for thousands of Russian domains in June 2026 as it implemented US and EU sanctions
- As a result, seven major Russian banks now serve certificates from a state root that no mainstream browser trusts, forcing users to manually install them
- Ukraine's Foreign Intelligence Service says the losses turn Russian banking, email, and internal systems into easier targets
Russian companies are finding themselves in an extremely tricky situation as US OFAC and EU sanctions now affect international security certificates issued by third-party providers.