aarongable / draft-acme-ari

Internet Draft for the Automated Certificate Management Environment (ACME) Renewal Information (ARI) Extension
Other
3 stars 7 forks source link

Clarify computation of base64(serial), provide better example #53

Closed aarongable closed 5 months ago

aarongable commented 5 months ago

Clarify that the serial portion of the unique identifier must be computed as the base64 of the DER encoding of the serial number, as otherwise the serial number is just an integer which could have multiple representations and therefore multiple potential base64 encodings.

Change the example certificate to one which has a serial number that would be negative if not for the leading zero byte in the DER encoding, to demonstrate the importance of this specification.

Fixes https://github.com/aarongable/draft-acme-ari/issues/52