RE: Sample certificate sites

[Mark Bartel <mbartel@xxxxxxxxxxxx>]

Since some people expressed interest, I've posted a couple of sample certificates at http://www.magmacom.com/~mbartel/iso/certificates/samples/sample_certificates.html, with the intention to put up a few more weird ones later, as well as "normal" ones with different algorithms.  These are all certificates that I've generated using the default configuration (well, MD2 is not the default hash algorithm).  The notable characteristics of the certificates are that they contain subject and issuer unique identifiers, use the basic constraints extension (marked critical), and one of them has a BMPString value in the subject name.  Peter, feel free to use these as examples in your style guide.

I've found that MSIE chokes on the unique identifiers, and won't read the BMPString value either.  But I'm going on faith that since the Cryptoapi 2.0 beta certificate viewer can read and display the BMPString, it's ok.  It's the only program I've found (other than my own, of course) that can.

- Mark Bartel