serialNumber in the subject field of a CA certificate

From: Anette Andresen (anette_andresen_at_hotmail.com)
Date: 07/28/04 

Date: Wed, 28 Jul 2004 10:32:25 +0200

Hi!

In RFC3739 it is said that the subject of a certificate shall contain an
appropriate subset of the following attributes:

      domainComponent;
      countryName;
      commonName;
      surname;
      givenName;
      pseudonym;
      serialNumber;
      title;
      organizationName;
      organizationalUnitName;
      stateOrProvinceName; and
      localityName.

Among those attribute is the serialNumber (SN) attribute that I would like
to have in the subject field of my CAs.
I have managed to add that attribute to the subject of a stand-alone CA by
entering SN=123456 in the subject field during installation of the CA.

But I have not managed to add the serialNumber attribute to the subject
field of an enterprise sub CA.
I'm trying to do the same as before, by adding the SN=123456 during the
installation of the CA,
but the SN attribute is not shown in the certificate's subject field.

Is there some other way I can add the SN to the subject field of a CA
certificate?

Thanks!

Regards,
Anette Andresen

Relevant Pages

  • RE: Bug in X509Certificate.GetSerialNumber and X509Certificate.GetSerialNumberString
    ... explorer and .NET framework handle the serial number byte array. ... I have tried to open a test certificate and I find that the certificate's ... byte array order is same as the output of .net's GetSerialNumber method. ... While if you want to show the serialnumber same with the explorer. ...
    (microsoft.public.dotnet.framework)
  • Re: Certificate problem
    ... error it shows is mentioned above, it even says the certificate is valid. ... I get "revocation for this certificate is not available". ... For your www.ekool.ee site, its CRL is listed as "URL=http://www.sk.ee/crls/klass3/klass3.crl";, which isn't reachable, down, or the path is invalid to the .crl revocation file). ... Certificate users MUST be able to handle serialNumber values up to 20 octets. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: X509Certificate vs HttpClientCertificate
    ... So comparison based on issuer SerialNumber field only is not really ... good security practise (unless you check the issuer and the issuer signature also). ... Checking the hash of the binary-der cert is a simple and unique way to ... The SerialNumber certificate field is stored in the cert in exactly the ...
    (microsoft.public.dotnet.security)
  • Re: Retrieving certificate from its issuer and serial number
    ... You can retrieve Certificate Serial Number and Issuer Name from ... SerialNumber and IssuerName property of CAPICOM.Certificate object. ... Use API CertStrToName to convert IssuerName to API compatible format. ... CertFindCertificateInStore // to finally find the certificate in store ...
    (microsoft.public.platformsdk.security)
  • Signing drivers with signtool for XP 64-bit -- suppressing the war
    ... Ineed to suppress the unsigned driver installation dialog for an automation ... article "Driver signing policy is automatically elevated for unsigned ... I need to sign our drivers for unattended installation via ... Signing Certificate Chain: ...
    (microsoft.public.development.device.drivers)