validation path for the signer certificate. Certificate revocation status checks using CRLs is disabled during path validation if the signer certificate contains the <b>id-pkix-ocsp-no-check</b> extension. After successful path validation the function returns success if the <b>OCSP_NOCHECKS</b> flag is set. Otherwise it verifies that the signer certificate meets the OCSP issuer criteria including potential delegation. If this does not succeed and the <b>OCSP_NOEXPLICIT</b> flag is not set the function check