With Ubuntu 26.10 that shipped in October there is a little talked about feature with upki revocation support beginning to roll out. Due to the late change, upki for certificate revocation was only enabled for Ubuntu 26.10's curl package but with more plans ahead...