Don't forget that a single certificate is used to sign multiple JWTs. Revoking a certificate (let alone communicating it) will revoke all signed JWTs, not just

Don't forget that a single certificate is used to sign multiple JWTs. Revoking a certificate (let alone communicating it) will revoke all signed JWTs, not just the specific user's.