World's smallest well-formed certificate

I'm working on a problem that involves the DER encoding of the smallest 
well-formed (yet pathological) certificate. How many octets can the 
world's smallest well-formed certificate be?

A Certificate is a SEQUENCE of TBSCertificate, AlgorithmIdentifier, and 
BIT STRING (the signature). The world's smallest certificate would be 
version = 1 (therefore omitted), a serial number of 0, a hypothetical 
signature (AlgorithmIdentifier) that has the world's smallest object 
identifier (0.0) and no parameters, an issuer Name (distinguished name) 
that has one RDN that has one Attribute whose type is the world's 
smallest object identifier (0.0) and whose value is the ASN.1's smallest 
value (NULL), with proper validity times, the same or similar smallest 
subject Name, a well-formed SubjectPublicKeyInfo, and none of the 
optional fields: issuerUniqueID, subjectUniqueID, and extensions.

By "well-formed", I mean that an ASN.1 '88 parser (i.e., one that does 
not enforce information object classes) will parse it (including the BIT 
STRING contents) and not barf. Such a certificate could not possibly be 
"valid", since the signature block would not be a real digital signature.

Sean

(PS For those who want to know "why", it's because I am trying to test 
some assumptions about how small a certificate can be.)

_______________________________________________
pkix mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/pkix