In some cases revocation info will be live, in others it will be stored inside of the document. My use case involves embedding it, but also being able to verif

In some cases revocation info will be live, in others it will be stored inside of the document. My use case involves embedding it, but also being able to verify it (Adobe distributes trusted CA certs through a signed PDF). Never would I need to run my own PKIX infrastructure.