Subject: CA root revokation

From: "Enrique Velasco" <[email-masked]>
Date: Mon, 13 Sep 2004 11:30:24 -0400

Hi All,

	Is there any way to revoke a root CA? (by means of CRL, OCSP or such).

	We have working on a scheme having the root CA off-line, using indirect CRL
for the Intermediate CAs.

	This seems odd to me, but, can we use an intermediate CA to sign a CRL
issued for the root CA?

	Thanks

Enrique Velasco - [email-masked]
Jefe de Proyecto - (56 2) 688-6499
www.acepta.com - Autoridad certificadora de firma electrónica para Chile