I am having problems incorporating the TIS Glenwood CRL into
my TechMail (TIPEM based) PEM implementation. Upon close examination I
see that this CRL contains no revoked certificates. My understanding
of the ASN.1 syntax tells me that in this situation nothing should be
generated for the "list of revoked certificates." (i.e., it should not
be present in the BER). However I find a "NULL" BER object in its
place:
30 82 01 1a [UNIV 16 Sequence/Sequence Of] constr <282>
. 30 81 84 [UNIV 16 Sequence/Sequence Of] constr <132>
. . 30 0d [UNIV 16 Sequence/Sequence Of] constr <13>
. . . 06 09 [UNIV 6 Object Identifier] <9>
2a 86 48 86 f7 0d 01 01 *.H.....
02 .
. . . 05 00 [UNIV 5 Null] <0>
. . 30 53 [UNIV 16 Sequence/Sequence Of] constr <83>
. . [Rest of Name truncated for Brevity]
. . 17 0d [UNIV 23 UTCTime] <13>
39 33 30 36 32 32 32 31 93062221
33 33 34 34 5a 3344Z
. . 17 0d [UNIV 23 UTCTime] <13>
39 33 30 37 30 38 32 31 93070821
33 33 34 34 5a 3344Z
--> . . 05 00 [UNIV 5 Null] <0> <---- Should this be there?
. 30 0d [UNIV 16 Sequence/Sequence Of] constr <13>
. . 06 09 [UNIV 6 Object Identifier] <9>
2a 86 48 86 f7 0d 01 01 *.H.....
02 .
. . 05 00 [UNIV 5 Null] <0>
. 03 81 81 [UNIV 3 Bit String] <129>
. [Rest of signature truncated for Brevity]
Is this a correct thing to do?
-Jeff