Good certificates die young: what's passive revocation and how's it implemented?smallstep.com9 pointssourishkrout7 years ago