handle revoked certificates in the reflection api