I'm trying to understand the security part in SSL.
Lets say I have a domain called xyz.com and I was able to successfully verify with CA. But the domain expires 1 year from now.
However I was able to get a SSL that has validly for 3 Years.
I dropped the domain xyz.com but after sometime that domain got backordered by someone else.
Now I can still use my unexpired xyz.com SSL and trick the user that they are in xyz.com even though I don't have access to that domain.
Is such things possible? If such things happen, CA will be in trouble right? How do the CA prevent such things?