Re: Are DN's really names?

> Ray,
>
>         does revocation of a certificate revoke the key or just the
> fact that someone vouched for it.
>
>         I assume I can have the same key in many different certificates.

There is nothing anywhere which says that each keypair can only be
associated with one certificate.  And there's nothing which ties a
revocation to anything but the certificate.

This is actually, in my opinion, one of the advantages of identifying
certificates by issuer/serial number vs. by public component.

 -Ray