I have some user information ( with certificate ) ,like

cn = bob, dc= one, dc = two ,dc = org sn: .. userCertificate;binary::... .. : ...

someday , if he would be revoked, should i move it to another entry ( replace a new dn ), like

cn = bob, dc = crl ,dc = two ,dc = org

or maybe I use the same entry , like

cn = bob, dc= one, dc = two ,dc = org sn: .. userCertificate;binary::... .. : ... revoked : true/false revokeTime : ...

gtalk:freeespeech@gmail.com gtalk%3Afreeespeech@gmail.com