Eight percent of digital certificates served by websites had been revoked but are still in use, new study finds.