> Revocation can be done only for new certs.
That's not true. The "newness" of a cert or a CA has absolutely nothing to do with how, if and when it can be revoked.
> Revocation can be done only for new certs.
That's not true. The "newness" of a cert or a CA has absolutely nothing to do with how, if and when it can be revoked.