Add note specifying that issuer might be different for status lists.

index.html

@@ -752,6 +752,17 @@ <h3>Validate Algorithm</h3>
 as indicated in the `statusMessages` array.
         </li>
       </ol>
+
+      <p class="note" title="Issuer validation is use case dependent">
+It is expected that a <a>verifier</a> will ensure that it trusts the issuer
+of a <a>verifiable credential</a>, as well as the issuer of the associated
+<a href="#bitstringstatuslistcredential">BitstringStatusListCredential</a>,
+before using the information contained in either credential for further
+decision making purposes. Implementers are advised that the issuers of these
+credential might differ, such as when the original issuer of the
+<a>verifiable credential</a> does not maintain a record of its validity.
+      </p>
+
     </section>
 
     <section class="normative">