Reading subkey, identity and attribute expiration and revocation in search