Re: World's smallest well-formed certificate

There are many and not only one smallest certificate, any serial number
less than 128 give a same length cert. The same applies for the validity
time.

Note that my cert
-----BEGIN CERTIFICATE-----
MDwwMgIBfzADBgEAMAAwGhcLMTYwNTE4MDEwMVoXCzE3MDUxODAyMDJaMAAwCDAD
BgEAAwEAMAMGAQADAQA=
-----END CERTIFICATE-----

is only 60 bytes log, therefore Ann wins.
Explanation: the seconds in UTC time are optional.

/Ann.

Am 18.05.2016 um 15:20 schrieb Rob Stradling:
> On 18/05/16 14:01, Erwann Abalea wrote:
>> Bonjour,
>>
>> Your examples have serial numbers encoded with a zero length, this is
>> not DER compliant.
>> The Name type used for issuer and subject is an unconstrained SEQUENCE
>> OF, so in theory it can be empty and be well-formed (from a DER point of
>> view).
> 
> Good points.
> 
>> My proposal, 66 octets:
>> -----BEGIN CERTIFICATE-----
>> MEAwNgIBADADBgEAMAAwHhcNMTYwNTE4MDAwMDAwWhcNMTcwNTE4MDAwMDAwWjAA
>> MAgwAwYBAAMBADADBgEAAwEA
>> -----END CERTIFICATE-----
> 
> Erwann wins.  ;-)
> 

_______________________________________________
pkix mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/pkix