PKIMessage ::= SEQUENCE { header PKIMessage, body PKIBody, protection [0] PKIProtection OPTIONAL, -- (BIT STRING) extraCerts [1] SEQUENCE SIZE (1..MAX) OF Certificate OPTIONAL }