That's not at all what you said. What I replied to is where you literally said: > Revocation can be done only for new certs. That's not true. The "newness" of

That's not at all what you said. What I replied to is where you literally said: > Revocation can be done only for new certs. That's not true. The "newness" of a cert or a CA has absolutely nothing to do with how, if and when it can be revoked.