Revocation status data is available using CRLs for the lifetime of the
certificate plus any applicable retention requirement. OCSP is being phased out
by GTS for most certificates.