I used the SHA algorithm. But it's possible I'm not printing the output
correctly. Will look at it again.
My real question though is about NSS and the certutil tool: certutil shows
fingerprints using both MD5 and SHA1. When I look at the SHA1 print of my
certificate and compared it to the thumbprint of same certificate in IE (and
yes IE uses sha1 as the thumbprint algorithm), the values are different.
Any idea why? This is what lead me to think that an NSS fingerprint is
different than an IE thumbprint, but that does make too much sense especially
in terms of interoperability.
-- P
Michael Str�der wrote:
> Patrick wrote:
> >
> > What is the difference between a certificate fingerprint (NSS computes)
> > and a certificate thumbprint (IE display this in its Certificate
> > Wizard)?
> > I initially thought it would be same thing but different name. But after
> > checking values for my certificate using NSS/IE/COmmunicator, I'm not
> > sure anymore.
>
> IMHO Netscape uses MD-5 and MS IE uses SHA-1 to compute it.
>
> > Finally I tried computing my own certificate fingerprint using Sun's
> > MessageDigest class. I computed the digest using the bytes from the DER
> > encoded cert. AND I get yet another value!! Help anybody?
>
> Which algorithm did you use?
>
> Ciao, Michael.
