Let's say I have a domain name, like
mysupercoolproduct.com. I buy a 2 year SSL certificate for it, and then I am negligent and the domain gets snatched up by someone else. I still have a valid SSL Certificate for the domain, but I don't own the domain any more. (This could also occur if I sold the domain to someone)
What mechanisms are in place to invalidate a valid signed but illegitimately possessed SSL certificate? Since my pretend SSL cert was signed by a legitimate CA, browsers don't have a reason not to trust it. This would allow me to pull off the MITM attack of the century until it expires.
Are there any ways to globally invalidate all SSL certificates for a domain, if the domain expires or is sold to another company?