Having written pieces of it, I think one of the main values of the X9F1 Cert.
Mgmt. standard is that it DOES define procedures for issuance, CRL
distributionand cert. revocation. Granted these are too onerous for use in an
open environment like PEM, but the money banks certainly like them. I also
would suggest Addison's EDA document is NOT worthless in the
inter-organizational environment (some of the multisignature stuff is in the
X9F1 docs). But it is MOST useful, as you say, within the org. (e.g. for
workflow).