Certificates can be revoked by a CA, for example, if the domain is suspected of phishing or malware, if sanctions are applied to the owner, if the certificate was improperly issued.