[NovemberWhiskey]

>Why should a civilized country just revoke certification once you're fully vaccinated?

My assumption was that the revocation facility was there to support the standard PKI revocation use cases.

For instance: subsequent discovery of errors in the database that resulted in issuance of the certificate (we discovered you didn't actually get your second shot), loss of control of a signing key, etc.