Hi
I'm not even sure why I'm subscribed to clo-devel, but I can explain a bit about revocation certificates. All that is checked is that the revocation certificate is made by somebody with the private key. If somebody other than you can turn in a revocation certificate, that is itself proof that your key has been compromised.
Brandon