pub const CRL_REASON_CERTIFICATE_HOLD_FLAG: u32 = 2u32;