Re: Proper way to represent a NULL (no entries) CRL?

> I would think that either an empty SEQUENCE OF CRLEntry or no
> revokedCertificates would be valid but a NULL is not.

That's what I thought. And if both encodings (absent or empty 
SEQUENCE) are valid, we have a DER problem. I think this is
not a problem of the particular definition of the CRL. It
is an ASN.1 DER problem where the encoding of OPTIONAL fields
in general remains unclear.
 
>  -Ray

Wolfgang