Anyone relying on them with anything related to security or trust is playing Russian roulette at this point.

In any legal dispute involving them, Exhibit A will be "look at how they ran their SSL/TLS business". That won't go well.