pkinit certifictes revocation guidance required

[lux-integ]

Greetings,

I am attempting to learn how to deploy pkinit   by 
following the wiki here
( http://k5wiki.kerberos.org/wiki/Pkinit_configuration )


I want to generate  ssl-certificates (for a REALM ) then revoke them and 
generate a crl file.  The wiki gives recipes for generaing certificates but 
none  for certificate revoking nor generating a crl.  Because it is different 
from the normal ssl certificate generation/revocation  some guidance for 
certificata revocation and crl generation would be much appreciated.

Thanks in advance.

sincerely
LuxInteg