KB Article #161807

Converting a certificate serial number to the corresponding hash in the PassPort database

Problem

--The following error can appear in the Gateway log:

No certificate found in repository for XPPX509CertSelector: [.  lower limit : -1.  upper limit : -1. Certificate: Version: 3.Serial number: 123100274167159700196870788355707085104”

How can this serial number be used to look up the corresponding certificate in the PassPort database?

Resolution

* You can use the following command to convert the serial number to the corresponding hash:

echo 'obase=16;123100274167159700196870788355707085104' | bc | xxd -r -p | openssl sha1 -binary | base64 | cut -c1-24

* Then, go into the PassPort database and run a command like the following to get the details of the corresponding certificate:

select * from X509Certificate where serialnumhash='result';

where 'result' is the string returned by the previous command.