Slide 12 of 16
Notes:
The client does not receive the derived un/edifact certificate, because the initial X.509 certificate has been revoked.