[makomk]

The certificate revocation infrastructure is something they're required to maintain in order for any of the browsers to actually accept their certificates, though.