Denis,
<snip>
Use of AIA in CRLs would be one way to do it, while the use of SIA in CA certificates is the other way.
I'm pleased to read that you acknowledge AIA in CRLs as a valid option. That is all I ask for.
Use of AIA in CRLs *would be* one way to do it, while the use of SIA in CA certificates *is* the other way. :-)
Stefan Santesson Microsoft Security Center of Excellence (SCOE)