title: What if security is compromised by site that is certified by valid CA?
body: <p>I am looking into web security topic and just wondering what if your financial, credit card or private information is misused or compromised by a website having valid seal of some certification Authority? </p>
  
  <ol>
  <li><p>Does CA take any legal action against the offending entity in
  addition to revoking certificate?</p></li>
  <li><p>How does the CA know of any irregularity?</p></li>
  <li><p>Does CA carry out any audit of the entities they certify? or is it not their part in the job?</p></li>
  </ol>