| OLD | NEW |
| (Empty) |
| 1 This is a TBSCertificate which has a serial number that is 26 octets long. This | |
| 2 violates RFC 5280. | |
| 3 | |
| 4 | |
| 5 $ openssl asn1parse -i < [TBS CERTIFICATE] | |
| 6 0:d=0 hl=2 l= 85 cons: SEQUENCE | |
| 7 2:d=1 hl=2 l= 3 cons: cont [ 0 ] | |
| 8 4:d=2 hl=2 l= 1 prim: INTEGER :00 | |
| 9 7:d=1 hl=2 l= 26 prim: INTEGER :42C83C785552E43927E48BE1280FA20
F9FB08F47F944C32668F9 | |
| 10 35:d=1 hl=2 l= 3 cons: SEQUENCE | |
| 11 37:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01 | |
| 12 40:d=1 hl=2 l= 3 cons: SEQUENCE | |
| 13 42:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05 | |
| 14 45:d=1 hl=2 l= 30 cons: SEQUENCE | |
| 15 47:d=2 hl=2 l= 13 prim: UTCTIME :121018031200Z | |
| 16 62:d=2 hl=2 l= 13 prim: UTCTIME :131018145959Z | |
| 17 77:d=1 hl=2 l= 3 cons: SEQUENCE | |
| 18 79:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83 | |
| 19 82:d=1 hl=2 l= 3 cons: SEQUENCE | |
| 20 84:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3 | |
| 21 -----BEGIN TBS CERTIFICATE----- | |
| 22 MFWgAwIBAAIaQsg8eFVS5Dkn5IvhKA+iD5+wj0f5RMMmaPkwAwQBATADBAEFMB4XDTEyMTAxODA | |
| 23 zMTIwMFoXDTEzMTAxODE0NTk1OVowAwQBgzADBAHz | |
| 24 -----END TBS CERTIFICATE----- | |
| OLD | NEW |