1This is an otherwise valid TBSCertificate, except there is a NULL after the 2extensions. 3 4 5$ openssl asn1parse -i < [TBS CERTIFICATE] 6 0:d=0 hl=2 l= 69 cons: SEQUENCE 7 2:d=1 hl=2 l= 3 cons: cont [ 0 ] 8 4:d=2 hl=2 l= 1 prim: INTEGER :02 9 7:d=1 hl=2 l= 1 prim: INTEGER :01 10 10:d=1 hl=2 l= 3 cons: SEQUENCE 11 12:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01 12 15:d=1 hl=2 l= 3 cons: SEQUENCE 13 17:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05 14 20:d=1 hl=2 l= 30 cons: SEQUENCE 15 22:d=2 hl=2 l= 13 prim: UTCTIME :121018031200Z 16 37:d=2 hl=2 l= 13 prim: UTCTIME :131018145959Z 17 52:d=1 hl=2 l= 3 cons: SEQUENCE 18 54:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83 19 57:d=1 hl=2 l= 3 cons: SEQUENCE 20 59:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3 21 62:d=1 hl=2 l= 5 cons: cont [ 3 ] 22 64:d=2 hl=2 l= 3 cons: SEQUENCE 23 66:d=3 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:DD 24 69:d=1 hl=2 l= 0 prim: NULL 25-----BEGIN TBS CERTIFICATE----- 26MEWgAwIBAgIBATADBAEBMAMEAQUwHhcNMTIxMDE4MDMxMjAwWhcNMTMxMDE4MTQ1OTU5WjADBAG 27DMAMEAfOjBTADBAHdBQA= 28-----END TBS CERTIFICATE----- 29 30ERROR: Unconsumed data inside TBSCertificate 31 32-----BEGIN ERRORS----- 33RVJST1I6IFVuY29uc3VtZWQgZGF0YSBpbnNpZGUgVEJTQ2VydGlmaWNhdGUK 34-----END ERRORS----- 35