Metacrafter Registry

Datatypes

X.509 certificate serial number

ID x509_serial_number

DatatypeNot PIIidentifierDraft

This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).

Serial number that a certification authority assigns to a certificate, unique among the certificates it issues. RFC 5280 limits it to 20 octets. Certificate stores and registries print it in hexadecimal, with or without colons between octets; a leading 00 octet is the sign byte of the DER integer, so a 20-octet number may take 21 octets. The format alone looks like any hexadecimal string: the type is told by the field name (serial, serialNumber, СерийныйНомер).

Categories
Cryptographic identifiers
Countries
Global (not tied to a country)
Languages
Common to most languages
Quality
80/100 · missing: mapping (Wikidata, Schema.org, ...), detector coverage
Metacrafter rules
no detection rule yet
Supported by tools
no tool record lists this type yet

Regular expression

^(?:(?:[0-9A-Fa-f]{2}){1,21}|[0-9A-Fa-f]{2}(?::[0-9A-Fa-f]{2}){1,20})$

Python re syntax.

Examples

ValueDescription
00A94CF4CA0000000005A1CA certificate of an accredited Russian certification authority (e-trust.gosuslugi.ru)
3382BD430000000004B0Serial number in the style of Microsoft and CryptoPro CA
00:a9:4c:f4:ca:00:00:00:00:05:a1The first number with colons, as openssl x509 -text prints it
00A94CF4CA0000000005A100A94CF4CA0000000005A1 invalid22 octets, longer than RFC 5280 allows

Translations

LanguageNameDescription
RussianСерийный номер сертификата X.509Номер, который удостоверяющий центр присваивает сертификату; уникален среди выданных им сертификатов. Записывается в шестнадцатеричном виде, до 20 октетов (RFC 5280).

Sources

Use this record