<div dir="ltr"><div class="gmail_extra"><span style="font-size:12.8px">Reposing on behalf of </span><span name="Jürgen Brauckmann" class="gmail-gD" style="font-size:12.8px">Jürgen Brauckmann</span><span style="font-size:12.8px;white-space:nowrap"> </span><span class="gmail-go" style="font-size:12.8px;white-space:nowrap"><span><</span><a href="mailto:brauckmann@dfn-cert.de">brauckmann@dfn-cert.de</a><span>></span></span></div><div class="gmail_extra"><span class="gmail-go" style="font-size:12.8px;white-space:nowrap"><span><br></span></span></div><div class="gmail_extra"><span style="font-size:12.8px">Ryan Sleevi via Public schrieb:</span><br style="font-size:12.8px"><span class="gmail-im" style="font-size:12.8px">>   4. The CA has not revoked any certificates which contain certificate<br>> information verified using the document or data.<br><br></span><span style="font-size:12.8px">Your goal is to kill OV? Or am I missing something? e.g., Enterprise RA</span><br style="font-size:12.8px"><span style="font-size:12.8px">authorization must be revalidated each time a certificate is revoked? What?</span><br style="font-size:12.8px"><br style="font-size:12.8px"><span style="font-size:12.8px">Regards,</span><br style="font-size:12.8px"><span style="font-size:12.8px"> Jürgen</span><br></div></div>