I agree. "Revoking everything digicert" is a bit imprecise, "preventing digicert from issuing new certificates" is a more reasonable measure that actually only damages the parties that deserve it (digicert) and spares innocent bystanders (their customers).