Improving revocation : will Let's Encrypt support OCSP Must-staple?

Feature Requests
42

CP: ."id-kp-emailProtection [RFC5280] maybe present. Other values shouldnotbe present"
Is this an hint that there maybe come s/mime certificates too ? :slight_smile:

And an typo on the head of page 62:
“Curve P-521” “ansip384r1 ::= { iso(1) identified-organization(3) certicom(132) curve(0) 35 }”