Patrick T <[email protected]> writes:

>I've found one of the certificates here (*.gov.bn, Symantec issued) seems to
>contain some NULL characters in the SAN.

Wow, you're right:

 673  359:       SEQUENCE {
 677   33:         SEQUENCE {
 679    3:           OBJECT IDENTIFIER subjectAltName (2 5 29 17)
 684   26:           OCTET STRING, encapsulates {
 686   24:             SEQUENCE {
 688    8:               [2] '*.gov.bn'
 698   12:               [2] 00 5A 37 00 2A 2E 67 6F 76 2E 62 6E
         :               }
         :             }
         :           }

The tail end of that is *.gov.bn, no idea what the four bytes before that are.

Peter.
_______________________________________________
dev-security-policy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security-policy

Reply via email to