When the private key of a CA is compromised, all the certificates issued by that CA should be revoked.

• CA的私有密钥一旦泄露；该CA签发的所有证书就只能全部作废.