re: revocation

I may be dowsing a dead flame ... but I've heard noone mention the
possibility that the desired result can be achieved without pre-dated CRL's.

Why not reissue a new certificate with the desired expiration date, and revoke
the old certificate ASAP (maybe allowing some time for the new certificate
to take effect)?  To me this seems adequate given the relative lack of demand
for the operation.

----
Dave Jablon (dpj(_at_)banyan(_dot_)com)