added multi-level-ca-revoked scenario