Changes

The [https://cabforum.org/baseline-requirements-documents/ CA/Browser Forum Baseline Requirements] say they following about Mozilla does not expect there to be CRLReasons in OCSP:* Section 7.3: ''Effective 2020‐09‐30, the CRLReason indicated MUST contain a value permitted responses for CRLs, as specified in Section 7.2.2.''* Section 7.3.2: ''The singleExtensions of an OCSP response MUST NOT contain the reasonCode (OID 2.5.29.21) CRL entry extensionTLS end-entity certificates.''

== certificateHold ==TO DO* Address questions about consistency between OCSP and CRL revocation reason codes for a certificate. (Not required by Mozilla) The BRs say the following:* Answer question about certificateHold in OCSP responses per RFC 6960?BRs section Section 7.2.2says: '' the CRLReason MUST NOT be certificateHold''* Section 7.3 (OCSP Profile) says: ''the CRLReason indicated MUST contain a value permitted for CRLs, as specified in Section 7.2.2.''