1This is an otherwise "valid" input to ParseCertificate(), however there is a 2trailing NULL after the signature field. 3 4 5$ openssl asn1parse -i < [CERTIFICATE] 6 0:d=0 hl=2 l= 14 cons: SEQUENCE 7 2:d=1 hl=2 l= 2 cons: SEQUENCE 8 4:d=2 hl=2 l= 0 prim: NULL 9 6:d=1 hl=2 l= 2 cons: SEQUENCE 10 8:d=2 hl=2 l= 0 prim: NULL 11 10:d=1 hl=2 l= 2 prim: BIT STRING 12 14:d=1 hl=2 l= 0 prim: NULL 13-----BEGIN CERTIFICATE----- 14MA4wAgUAMAIFAAMCAKwFAA== 15-----END CERTIFICATE----- 16 17ERROR: Unconsumed data inside Certificate SEQUENCE 18 19-----BEGIN ERRORS----- 20RVJST1I6IFVuY29uc3VtZWQgZGF0YSBpbnNpZGUgQ2VydGlmaWNhdGUgU0VRVUVOQ0UK 21-----END ERRORS----- 22