title: Java implementations of TSP, OCSP and CMS
body: <p>I'm trying to understand java APIs for digital signatures.
  I should use custom cryptoprovider to compose digital signature. I know how to sign document and get detached signature using this CSP, now I need to add timestamp and certificate status to this signature(to make signature valid for government authorities). These thing are done using TSP and OCSP.
  The question:</p>
  
  <ol>
  <li>where should get TSP client?</li>
  <li>am I right that it is sufficient to use built in java OCSP support
  for verifing certificate?</li>
  <li>does tsp and verification info somehow connected with CMS?</li>
  <li>the last and the most interesting: what should I do with timestamp
  info and cert verification info: would it be detached files or they
  are parts of signature??</li>
  </ol>