The following section describes the CRL hold flags:
4.13.1 Certificate Hold Flags
The following flags are used to specify what to do if a certificate
is on hold. For use with the cRLHoldInstruction field in the functions NPKIVerifyCertificateWithTrustedRoots.
Value
Name
Description
0
PKI_HOLD_INSTRUCTION_NONE
There is nothing specific to do.
1
PKI_HOLD_INSTRUCTION_CALL_ISSUER
The person trying to verify the certificate
should contact the certificate’s issuer for information.
2
PKI_HOLD_INSTRUCTION_REJECT
The certificate should be rejected as
though it were revoked.