Auto ID - Issue with Deterministic Identifier Generation Using DER-Encoded subject_common_name

[jfrank-summit]

The system is designed to generate a deterministic identifier for an Auto ID by hashing the issuer_id together with the subject_common_name of a certificate. Currently, the subject_common_name is being utilized in its DER-encoded form rather than as a plain string.

In the DER encoding process, extra bytes are prefixed to the subject_common_name value that represent the data type and length. This inclusion results in a modification of the input data for the hash function, leading to the generation of unexpected identifier values.