2.2.2.4 Health Certificate Response

The health certificate response MUST be in PKCS #7 format (as specified in [RFC2315]) and be encoded in ASN.1 DER, and contain the issued X.509 certificate (as specified in [RFC3280]) in a certificate chain. The format of this response MUST be as specified in [MS-WCCE] section 2.2.2.8.

The health certificate response MUST be present if the client is deemed to be compliant with policy.

The health certificate response MAY be present if the client is deemed to be noncompliant with policy.<17>