The `ssl` module fails to distrust known compromised intermediate certificates. To address this, a denylist of compromised certificates has been implemented to ensure that these certificates are automatically rejected, regardless of the `SSLContext` policy configuration, even when certificate revocation is not configured.