It is desirable to revoke a certificate before it expires because
(a) the user is no longer certified by this CA
(b) the CA’s certificate is assumed to be compromised
(c) the user’s private key is assumed to be compromised
(d) all of the mentioned
This question was addressed to me in an interview for job.
Question is from Public Keys and X.509 Certificates-II topic in chapter Message Authentication Codes, Whirlpool Algorithm and Key Management and Distribution of Cryptograph & Network Security