Ok, so, as far as I can understand the final proposed solution would be to use the the OCSP server to send responses with extentions on the reason (certificateHold). I do think that the 'suspended' state could be bettere handled and some few lines could be spent on the drafts (OCSP ???). I'll follow your advice. Thank you all for the replies. C'you, Massimiliano Pala (madwolf@openca.org) P.S.: If you have more ideas on this, please send me two lines... :-D
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature