XY"><b>EXFLAG_PROXY</b></dt>
<dd>

<p>The certificate is a valid proxy certificate.</p>

</dd>
<dt id="EXFLAG_SI"><b>EXFLAG_SI</b></dt>
<dd>

<p>The certificate is self issued (that is subject and issuer names match).</p>

</dd>
<dt id="EXFLAG_SS"><b>EXFLAG_SS</b></dt>
<dd>

<p>The subject and issuer names match and extension values imply it is self signed.</p>

</dd>
<dt id="EXFLAG_FRESHEST"><b>EXFLAG_FRESHEST</b></dt>
<dd>

<p>The freshest CRL extension is present in the certificate.</p>

</dd>
<dt id="EX