| Non existing is good |
|
| Non existing is revoked |
|
| Non existing is unauthorized |
|
| Include certificate chain in response |
|
| Include signing certificate in response |
|
| ResponderID |
|
| Request must be signed with a trusted certificate |
|
| Response Validity (seconds) |
|
| Max-Age HTTP header (seconds) |
|
| Enable nonce in response |
|
| Omit reason code if revocation reason is unspecified (CABF compliance) |
|