RFC 3739, "Internet X.509 Public Key Infrastructure: Qualified Certificates Profile", March 2004Source of RFC: pkix (sec)
See Also: RFC 3739 w/ inline errata
Errata ID: 3108
Publication Format(s) : TEXT
Reported By: Loïc Etienne
Date Reported: 2012-02-06
Verifier Name: Sean Turner
Date Verified: 2012-02-08
Section C.1.1.1. says:
GeneralizedTime : "197110141200Z"
It should say:
GeneralizedTime : "19711014120000Z"
11 Restrictions on BER employed by both CER and DER
11.7.2 The seconds element shall always be present.
In rfc 3739, C.3 DER-encoding, the second-zeroes are present:
... ..313937 31313031 34313230 3030305A ...
They are just missing in the string representation above.
Additionally RFC 5280 requires the second-zeroes be present.