Goetz Babin-Ebell wrote: > Phil Dibowitz schrieb: > > Hello Phil, > >>> In some cases I see serial numbers as octet strings, i.e.: >>> >>> Serial Number: >>> ef:e1:73:da:b3:6a:cf:ad:6b:18:dd:58:7f:6b:49:fe >>> >>> And other cases as an integer, i.e.: >>> >>> Serial Number: 2 (0x2) > > The only difference is the size of the number. > > The moment processors (and C libraries) support 128 bit sized integers > you will see both serial numbers printed in decimal... > > It is only a representation in the output functions. > > In the real data both are represented as an ASN1 integer, > one with 1 byte length, the other with 16 byte length...
Thanks for the quick reply. Hmm. Then why is it when I create a self-signed CA with openssl I get the former displayed, but when when I then sign a cert with that CA, I get the latter? I don't understand why it is using different byte lengths? -- Phil Dibowitz P: 310-360-2330 C: 213-923-5115 Unix Admin, Ticketmaster.com
signature.asc
Description: OpenPGP digital signature
