I agree, how is sending a list of revoked certs not the best idea?