
I understand that each certificate can have a CRL distribution point (extension 2.5.29.31) – or even multiple ones, but let's not consider that for the moment. Let's assume we have a root CA > intermediate CAs > and leaf certificates.
My understanding is that the root CA issues (signs) any interm...