Now that CAs can provide their revoked intermediate cert data via the Common CA Database, we should add a requirement for them to provide this data within a certain amount of time after the revocation.

Reference:
https://wiki.mozilla.org/CA:SalesforceCommunity#Add_Revoked_Intermediate_Certificate_Data_to_Salesforce