[lamps] Revocation Request Format?

[Phillip Hallam-Baker <[e-mail]>]

Do we have a PKIX revocation request format?

I am asking because of a detail in the Trustico situation in which a file
of 23K private keys was emailed to a CA to request revocation.

At the point, the circumstances of that situation are not clear. But I can
see a scenario in which it is entirely plausible that a CA reseller would
have access to large numbers of TLS private keys and that is when they are
either hosting or managing the Web sites.

The management interfaces that allow Web sites to be wheeled around a data
center have become very sophisticated of late with virtualization and much
of that infrastructure is 'secret sauce'.

What might appear to be a five racks of 100 separate machines is likely
visible in the management console as one single entity.