Major Juan Carlos provides comment by mail:
XML and JSON of AdditionalKeyInfo.
Several comments here.
a. There seems to be a mismatch between the XML and JSON schema pieces
in these clauses and the contents of the XML and JSON schema files
provided separatedly. In these files, both the XML and the JSON types
contain components for including OCSP responses. However in the pieces
in the word document, such components do not appear.
b. In the JSON schema dss2-AdditionalKeyInfoType contains two components
that seem to be related with OCSP somehow, namely: "ocspresponse" and
"ocsp", both of base64 data type....as there is not any further
explanation, it is difficult to conclude what must placed within each
component. In addition to that, the XML schema only provides one
component for carrying OCSP related material, the OCSPResponse. This
leads me to think that maybe in the JSON schema there is a duplication
of components and only one of the aforementioned should be kept.
c. Clause 4.3.28 does not mention neither any component for transporting
OCSP responses nor component for POEs. I think that an specification of
the contents of the component for OCSP responses, and also for the POEs
should be added.