How to incorporate revocation status information into the trust metrics for public-key certification