title: How is revocation of a root certificate handled?
body: <p>There are several reasons to revoke a certificate, the most popular one being compromise of the private key.</p>
  
  <p>My question is:<br>
  What happens if there is a need to revoke the certificate of a certificate authority?</p>
  
  <p>Does this mean that <strong>all</strong> the certificates it has signed should be considered revoked?<br>
  This seems reasonable, since the CA will be issued a new certificate hence a new key-pair.  </p>
  
  <p>On the other hand, what would be the process to revoke and reissue possibly hundreds of certificates the specific CA has already issued so far?</p>
  
  <p>I am confused on the consequences of revoking a CA certificate.<br>
  Could someone please elaborate on this?  </p>