> Don't forget revocation checking = more centralised contro

How so? Doesn't revocation have to be done by the same entity that issued the certificate?