In some cases I see serial numbers as octet strings, i.e.:

        Serial Number:
            ef:e1:73:da:b3:6a:cf:ad:6b:18:dd:58:7f:6b:49:fe

And other cases as an integer, i.e.:

        Serial Number: 2 (0x2)

In openssl's case, self-signed certs use an octet-string (though this
seems to not be true in all versions), while all certs signed by the CA
seem to use an incrimenting serial number.

I work with both openssl and the RSA Keon solution. The laster seems to
use octet strings everywhere.

What is the difference between these two types of serial numbers? Does
one deprecate the other? I didn't see anything in RFC 2459 that
addressed this.

Thanks,
-- 
Phil Dibowitz
P: 310-360-2330 C: 213-923-5115
Unix Admin, Ticketmaster.com

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to