Hi,
Please review the code for the following design:
http://pki.fedoraproject.org/wiki/TPS_Revocation_Routing
for Bug 902952 - RFE: Cert System 8.1 - Issuance/Revocation routing with TPS and multiple non-cloned CAs

code:
https://bugzilla.redhat.com/attachment.cgi?id=712351&action=diff&context=patch&collapsed=&headers=1&format=raw

thanks!
Christina