Focus on Delayed Revocation: Tackles the long-standing issue of delayed certificate revocation to enhance TLS certificate management security and reliability. Introduces clearer revocation expectations, improved incident reporting, subscriber education, revocation planning, and automated certificate issuance.

• No Exceptions to Revocation: Explicitly states no exceptions to TLS Baseline Requirements for revocation to ensure consistent enforcement.
• Stronger Subscriber Communication: CA operators must warn subscribers and have clear contractual requirements for cooperation with revocation timelines.
• Mass Revocation Preparedness: Mandates readiness for large-scale revocations through comprehensive plans, testing, and third-party assessments.