Online: certification path building, OCSP and CRL

Certification path is created according to information from Authority Information Access.

Issuer certificate: id-ad-caIssuers OBJECT IDENTIFIER ::= { id-ad 2 }

OCSP:  id-ad-ocsp OBJECT IDENTIFIER ::= { id-ad 1 }. 

CRL: HTTP CRL Distribution Points.