Richard Levitte - VMS Whacker wrote:
> Thanks. I'm comparing to a CRL I have and which works, and what I
> find that looks weird is this part:
Is this not a case of a "missing" revokedCertificates SEQUENCE OF
SEQUENCE ? Would this be normal encoding for an empty CRL?
revokedCertificates is flagged as OPTIONAL in RFC-2459 anyway.
> *> 105:d=2 hl=2 l= 19 cons: cont [ 0 ]
> > 107:d=3 hl=2 l= 17 cons: SEQUENCE
> > 109:d=4 hl=2 l= 15 cons: SEQUENCE
> *> 111:d=5 hl=2 l= 3 prim: OBJECT :X509v3 Authority Key Identifier
> *> 116:d=5 hl=2 l= 8 prim: OCTET STRING
This sure looks like crlExtrensions to me (as in a RFC-2459 X509v2 CRL),
which is EXPLICIT OPTIONAL, which I don't really know what that
implies...
//oscar
S/MIME Cryptographic Signature
