rtificate contains <b>thisUpdate</b> and <b>nextUpdate</b> fields. Normally the current time should be between these two values. To account for clock skew the <i>maxsec</i> field can be set to nonzero in OCSP_check_validity(). Some responders do not set the <b>nextUpdate</b> field, this would otherwise mean an ancient response would be considered valid: the <i>maxsec</i> parameter to OCSP_check_validity() can be used to limit the permitted age of responses.</p>

<p>The values written to <i>*revtime</i>, <i>