> > OCSPNonce ::= CHOICE {
> > nonceValue OCTET STRING,
> > unsupported NULL }
>
> Another way may be
>
> nonceValue OCTET STRING OPTIONAL -- unsupported if omitted.
>
Hehe. Nice one. Server-generated nonces :) I like that idea. Thats
exactly what CertControl does right now.