I think that's why certs like redhats have online verification. But you've raised a good point. Certificates need to be easily verifiable.