You must manually delete expired certs from Netscape. 5 The main reason to use certs is convenience. The group agreed with this and portability was tabled for consideration at a later date. However, the approach taken is not standard. Provide a toolkit for CRLs that works with Valicert.
Web servers download CRLs.
They maintain the CRLs for you. Provides a universal API that works with many popular web servers. Verisign - they do it for you and internally to their service. XCert - you have to buy their whole package to get the CRL management tools. They are partnering with Stronghold.