== certificateHold ==
The BRs say the following:
* Section 7.2.2 says: ''the CRLReason MUST NOT be certificateHold''* Section 7.3 (OCSP Profile) says: ''the CRLReason indicated MUST contain a value permitted for CRLs, as specified in Section 7.2.2.''
== Banned Revocation Reasons ==