Class SerialNumberLongerThan20Octets

java.lang.Object
de.mtg.jzlint.lints.rfc.SerialNumberLongerThan20Octets
All Implemented Interfaces:
JavaLint

public class SerialNumberLongerThan20Octets extends Object implements JavaLint
RFC 5280: 4.1.2.2. Serial Number The serial number MUST be a positive integer assigned by the CA to each certificate. It MUST be unique for each certificate issued by a given CA (i.e., the issuer name and serial number identify a unique certificate). CAs MUST force the serialNumber to be a non-negative integer. Given the uniqueness requirements above, serial numbers can be expected to contain long integers. Certificate users MUST be able to handle serialNumber values up to 20 octets. Conforming CAs MUST NOT use serialNumber values longer than 20 octets. Note: Non-conforming CAs may issue certificates with serial numbers that are negative or zero. Certificate users SHOULD be prepared togracefully handle such certificates.