Re: Why is the crlNumber an OCTET STRING?

Peter:

> That does actually point out another issue though:
> 
>   The CRL number is a non-critical CRL extension that conveys a
>   monotonically increasing sequence number for a given CRL scope and
>   CRL issuer.  This extension allows users to easily determine when a
>   particular CRL supersedes another CRL.
> 
> Isn't that what the dates in the CRL are for?  The only argument I can see for
> using crlNumber is if you're brave enough to risk using delta CRLs.

The CRL number is helpful in any situation where the CRL issuer produces CRLs with different scopes.

Also, CRLs can be issued before the expected nextUpdate.

Russ