document certificate revocation