1114 draft

In the latest 1114 draft, at the end of section 3.6.1:
>    Also note that the arithmetic required for certificate
>    validation is considerably faster than that involved in digitally
>    signing a certificate, so as to minimize the computational burden on
>    UAs.

  This is not necessarily true for all public key algorithms that
might be permitted by PEM in the future.  (DSS bashing suppressed.)