certificates not needed
use tokenSubTypes from OCHP spec, ch. 4.4.8
allow checking for existence of a Enum value