[duskwuff]

Revoking a certificate requires it to have been created with a functional CRL / OCSP configuration. This isn't the case here; there's no way to revoke the CA short of uninstalling it from every machine it's present on.