Baseline Requirements revocation requirement

[jsha]

@bburhans

Could you describe how you generated the list mentioned above? I see that the list has annotations such as “missing CAA checking results for ” but it only mentions that for one of the domains in each cert.

I forgot to answer this part: For each hostname on each certificate issued during the currently-valid window, we searched for records from our validation server saying "Checked CAA for " within the past 8 hours. If any of the names didn't show up as properly checked, we considered the whole certificate affected, and listed that name as an example. Some certificates might have only one affected name; others might have several. We didn't include the whole list of affected names because more names wouldn't change the status of the certificate.