[sirsar]

You are misunderstanding. The bloom filter is only a preliminary check; if it indicates a revoked certificate, you then verify that it's a true positive the traditional way.

[chrisshroba]

Oh of course. Thank you for clearing that up for me.