{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T19:10:38Z","timestamp":1782846638730,"version":"3.54.5"},"reference-count":66,"publisher":"Association for Computing Machinery (ACM)","issue":"FSE","license":[{"start":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T00:00:00Z","timestamp":1782777600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["62192734, 61806158, 62402372, and 62202371"],"award-info":[{"award-number":["62192734, 61806158, 62402372, and 62202371"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"name":"the Fundamental Research Funds for the Central Universities","award":["QTZX26013"],"award-info":[{"award-number":["QTZX26013"]}]},{"name":"the Scientific Research Program Funded by Shaanxi Provincial Education Department","award":["25JP117"],"award-info":[{"award-number":["25JP117"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Proc. ACM Softw. Eng."],"published-print":{"date-parts":[[2026,6,30]]},"abstract":"<jats:p>Transport Layer Security (TLS) implementations form the backbone of countless software systems, spanning web browsers, email clients, cloud services, and Internet of Things software, by enabling secure authentication and encrypted communication. However, their reliability hinges on the integrity of components like the Certificate Revocation List (CRL), which revokes compromised certificates to prevent attackers from exploiting expired or unauthorized credentials. Despite the CRL's critical role, CRL parsers, which decode CRL data for validation, remain overlooked in security research, exposing TLS-dependent software to potential threats. To address this gap, we introduce Retrieval-Augmented Testing (RAT), a framework powered by Large Language Models (LLMs), to systematically evaluate CRL parsers in mainstream TLS implementations such as OpenSSL, GnuTLS, and wolfSSL. RAT begins with leveraging an LLM to retrieve historical bug reports and cross-reference them with Request for Comments (RFC) 5280 specifications, generating structured test cases via an Abstract Syntax Notation One-aware mutation engine. These test cases are then fed into CRL parsers, and RAT employs an LLM to normalize their outputs. By analyzing these normalized results, RAT detects discrepancies and uncovers latent risks in CRL parsers. Our work makes the following contributions: (1) Unlike prior work focusing on certificate validation, this is the first study to systematically assess CRL parsers; (2) We propose RAT, a novel testing framework that leverages an LLM to integrate insights from retrieved bug reports and RFC 5280, enabling automated test-case generation; and (3) We have implemented an open-source prototype of RAT and experiments uncovered 23 new bugs, features, enhancements, fixes in commits, and x509s, demonstrating RAT's potential to strengthen the reliability and security of CRL parsers in TLS implementations.<\/jats:p>","DOI":"10.1145\/3808212","type":"journal-article","created":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T17:06:14Z","timestamp":1782839174000},"page":"4666-4689","source":"Crossref","is-referenced-by-count":0,"title":["RAT: Retrieval-Augmented Testing of Certificate Revocation List Parsers in TLS Implementations"],"prefix":"10.1145","volume":"3","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8015-9633","authenticated-orcid":false,"given":"Chu","family":"Chen","sequence":"first","affiliation":[{"name":"Qufu Normal University, School of Computer Science, Rizhao, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-9455-1875","authenticated-orcid":false,"given":"Qianxin","family":"Cheng","sequence":"additional","affiliation":[{"name":"Qufu Normal University, School of Computer Science, Rizhao, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0027-2976","authenticated-orcid":false,"given":"Pinghong","family":"Ren","sequence":"additional","affiliation":[{"name":"Qufu Normal University, School of Computer Science, Rizhao, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-1093-7268","authenticated-orcid":false,"given":"Hairong","family":"Yu","sequence":"additional","affiliation":[{"name":"Qufu Normal University, School of Computer Science, Rizhao, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5429-4580","authenticated-orcid":false,"given":"Cong","family":"Tian","sequence":"additional","affiliation":[{"name":"Xidian University, School of Computer Science and Technology, Xi'an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3119-3242","authenticated-orcid":false,"given":"Zhenhua","family":"Duan","sequence":"additional","affiliation":[{"name":"Xidian University, School of Computer Science and Technology, Xi'an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3421-1987","authenticated-orcid":false,"given":"Xu","family":"Lu","sequence":"additional","affiliation":[{"name":"Xidian University, School of Computer Science and Technology, Xi'an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1680-3129","authenticated-orcid":false,"given":"Bin","family":"Yu","sequence":"additional","affiliation":[{"name":"Xidian University, School of Computer Science and Technology, Xi'an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-0980-7628","authenticated-orcid":false,"given":"WenSheng","family":"Wang","sequence":"additional","affiliation":[{"name":"Xidian University, School of Computer Science and Technology, Xi'an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-1502-7238","authenticated-orcid":false,"given":"Jin","family":"Liu","sequence":"additional","affiliation":[{"name":"Xi'an University of Technology, School of Computer Science and Engineering, Xi'an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,6,30]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/3613904.3642016"},{"key":"e_1_2_1_2_1","volume-title":"Language Models Are Few-Shot Learners. In the 34th International Conference on Neural Information Processing Systems (NeurIPS). 1877-1901","author":"Brown Tom B.","year":"2020","unstructured":"Tom B. Brown, Benjamin Mann, Nick Ryder, Melanie Subbiah, Jared Kaplan, Prafulla Dhariwal, Arvind Neelakantan, Pranav Shyam, Girish Sastry, Amanda Askell, Sandhini Agarwal, Ariel Herbert-Voss, Gretchen Krueger, Tom Henighan, Rewon Child, Aditya Ramesh, Daniel M. Ziegler, Jeffrey Wu, Clemens Winter, Christopher Hesse, Mark Chen, Eric Sigler, Mateusz Litwin, Scott Gray, Benjamin Chess, Jack Clark, Christopher Berner, Sam McCandlish, Alec Radford, Ilya Sutskever, and Dario Amodei. 2020. Language Models Are Few-Shot Learners. In the 34th International Conference on Neural Information Processing Systems (NeurIPS). 1877-1901."},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.15"},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.40"},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2018.00014"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598110"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180226"},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","unstructured":"Mark Chen Jerry Tworek Heewoo Jun et al. 2021. Evaluating Large Language Models Trained on Code. arXiv:2107.03374 [cs.LG] https:\/\/doi.org\/10.48550\/arXiv.2107.03374 10.48550\/arXiv.2107.03374","DOI":"10.48550\/arXiv.2107.03374"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/2786805"},{"key":"e_1_2_1_10_1","doi-asserted-by":"crossref","unstructured":"David Cooper Stefan Santesson Stephen Farrell Sharon Boeyen Russell Housley and Tim Polk. 2008. Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile. RFC 5280. IETF. https: \/\/tools.ietf.org\/html\/rfc5280","DOI":"10.17487\/rfc5280"},{"key":"e_1_2_1_11_1","volume-title":"Cryptography parsed a CRL file with the authorityCertSerialNumber set to 0. [Online]. https: \/\/github.com\/pyca\/cryptography\/issues\/12748 Retrieved","year":"2025","unstructured":"Cryptography. 2025. Cryptography parsed a CRL file with the authorityCertSerialNumber set to 0. [Online]. https: \/\/github.com\/pyca\/cryptography\/issues\/12748 Retrieved June 29, 2025."},{"key":"e_1_2_1_12_1","volume-title":"Cryptography parsed the '<>' symbols stored in PrintableString. [Online]. https:\/\/github.com\/ pyca\/cryptography\/issues\/12698 Retrieved","year":"2025","unstructured":"Cryptography. 2025. Cryptography parsed the '<>' symbols stored in PrintableString. [Online]. https:\/\/github.com\/ pyca\/cryptography\/issues\/12698 Retrieved June 29, 2025."},{"key":"e_1_2_1_13_1","volume-title":"The cryptography system parsed a CRL file that contains a revoked certificate with a serial number of 0. [Online]. https:\/\/github.com\/pyca\/cryptography\/issues\/12771 Retrieved","year":"2025","unstructured":"Cryptography. 2025. The cryptography system parsed a CRL file that contains a revoked certificate with a serial number of 0. [Online]. https:\/\/github.com\/pyca\/cryptography\/issues\/12771 Retrieved June 29, 2025."},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00220"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102209"},{"key":"e_1_2_1_16_1","volume-title":"Cryptography Engineering: Design Principles and Practical Applications","author":"Ferguson Niels","year":"2010","unstructured":"Niels Ferguson., Bruce Schneier., and Tadayoshi Kohno. 2010. Cryptography Engineering: Design Principles and Practical Applications. Wiley, Indianapolis, IN, USA."},{"key":"e_1_2_1_17_1","volume-title":"the 14th USENIX Conference on Offensive Technologies (WOOT).","author":"Fioraldi Andrea","year":"2020","unstructured":"Andrea Fioraldi, Dominik Maier, Heiko Ei\u00dffeldt, and Marc Heuse. 2020. AFL++: Combining Incremental Steps of Fuzzing Research. In the 14th USENIX Conference on Offensive Technologies (WOOT)."},{"key":"e_1_2_1_18_1","volume-title":"RFC 5280 compliance: UTCTime parser accepts value without seconds field. [Online]. https: \/\/gitlab.com\/gnutls\/gnutls\/-\/issues\/1638 Retrieved","author":"TLS.","year":"2025","unstructured":"GnuTLS. 2025. RFC 5280 compliance: UTCTime parser accepts value without seconds field. [Online]. https: \/\/gitlab.com\/gnutls\/gnutls\/-\/issues\/1638 Retrieved June 29, 2025."},{"key":"e_1_2_1_19_1","unstructured":"Google. 2025. Honggfuzz. [Online]. https:\/\/github.com\/google\/honggfuzz Accessed: 2025-12-28."},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101962"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560594"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.17"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3719027.3765215"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.5555\/3495724.3496517"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3735637"},{"key":"e_1_2_1_26_1","volume-title":"the 34th USENIX Security Symposium. 5035-5051","author":"Lin Zhengyao","year":"2025","unstructured":"Zhengyao Lin, Michael McLoughlin, Pratap Singh, Rory Brennan-Jones, Paul Hitchcox, Joshua Gancher, and Bryan Parno. 2025. Towards Practical, End-to-End Formally Verified X.509 Certificate Validators with Verdict. In the 34th USENIX Security Symposium. 5035-5051."},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/2815675.2815685"},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3618257.3624802"},{"key":"e_1_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/3634737.3657003"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510416"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3611668"},{"key":"e_1_2_1_32_1","volume-title":"OpenSSL accepted a CRL file with an invalid AKI extension. [Online]. https:\/\/github.com\/openssl\/ openssl\/issues\/27114 Retrieved","author":"SSL.","year":"2025","unstructured":"OpenSSL. 2025. OpenSSL accepted a CRL file with an invalid AKI extension. [Online]. https:\/\/github.com\/openssl\/ openssl\/issues\/27114 Retrieved June 29, 2025."},{"key":"e_1_2_1_33_1","volume-title":"OpenSSL accepted the CRL file with an empty Key Identifier. [Online]. https:\/\/github.com\/openssl\/ openssl\/issues\/27474 Retrieved","author":"SSL.","year":"2025","unstructured":"OpenSSL. 2025. OpenSSL accepted the CRL file with an empty Key Identifier. [Online]. https:\/\/github.com\/openssl\/ openssl\/issues\/27474 Retrieved June 29, 2025."},{"key":"e_1_2_1_34_1","volume-title":"OpenSSL accepts the IDP extension with DER encoding as an empty sequence. [Online]. https: \/\/github.com\/openssl\/openssl\/issues\/27506 Retrieved","author":"SSL.","year":"2025","unstructured":"OpenSSL. 2025. OpenSSL accepts the IDP extension with DER encoding as an empty sequence. [Online]. https: \/\/github.com\/openssl\/openssl\/issues\/27506 Retrieved June 29, 2025."},{"key":"e_1_2_1_35_1","volume-title":"OpenSSL cannot correctly parse the authorityCertIssuer field containing the characters \u00d6 and \u00fc. [Online]. https:\/\/github.com\/openssl\/openssl\/issues\/27207 Retrieved","author":"SSL.","year":"2025","unstructured":"OpenSSL. 2025. OpenSSL cannot correctly parse the authorityCertIssuer field containing the characters \u00d6 and \u00fc. [Online]. https:\/\/github.com\/openssl\/openssl\/issues\/27207 Retrieved June 29, 2025."},{"key":"e_1_2_1_36_1","volume-title":"OpenSSL incorrectly parsed the authorityCertIssuer field information containing Chinese characters. [Online]. https:\/\/github.com\/openssl\/openssl\/issues\/27196 Retrieved","author":"SSL.","year":"2025","unstructured":"OpenSSL. 2025. OpenSSL incorrectly parsed the authorityCertIssuer field information containing Chinese characters. [Online]. https:\/\/github.com\/openssl\/openssl\/issues\/27196 Retrieved June 29, 2025."},{"key":"e_1_2_1_37_1","volume-title":"OpenSSL incorrectly parsed the authorityCertSerialNumber value. [Online]. https:\/\/github.com\/ openssl\/openssl\/issues\/27406 Retrieved","author":"SSL.","year":"2025","unstructured":"OpenSSL. 2025. OpenSSL incorrectly parsed the authorityCertSerialNumber value. [Online]. https:\/\/github.com\/ openssl\/openssl\/issues\/27406 Retrieved June 29, 2025."},{"key":"e_1_2_1_38_1","volume-title":"OpenSSL parsed a CRL file where both onlyContainsUserCerts and onlyContainsCACerts are set to True. [Online]. https:\/\/github.com\/openssl\/openssl\/issues\/27334 Retrieved","author":"SSL.","year":"2025","unstructured":"OpenSSL. 2025. OpenSSL parsed a CRL file where both onlyContainsUserCerts and onlyContainsCACerts are set to True. [Online]. https:\/\/github.com\/openssl\/openssl\/issues\/27334 Retrieved June 29, 2025."},{"key":"e_1_2_1_39_1","volume-title":"OpenSSL parsed a CRL file with the authorityCertSerialNumber set to 0. [Online]. https:\/\/github. com\/openssl\/openssl\/issues\/27321 Retrieved","author":"SSL.","year":"2025","unstructured":"OpenSSL. 2025. OpenSSL parsed a CRL file with the authorityCertSerialNumber set to 0. [Online]. https:\/\/github. com\/openssl\/openssl\/issues\/27321 Retrieved June 29, 2025."},{"key":"e_1_2_1_40_1","volume-title":"OpenSSL successfully parsed a CRL file with two identical AKI extensions. [Online]. https: \/\/github.com\/openssl\/openssl\/issues\/26661 Retrieved","author":"SSL.","year":"2025","unstructured":"OpenSSL. 2025. OpenSSL successfully parsed a CRL file with two identical AKI extensions. [Online]. https: \/\/github.com\/openssl\/openssl\/issues\/26661 Retrieved June 29, 2025."},{"key":"e_1_2_1_41_1","volume-title":"The AKI extension marked as critical. [Online]. https:\/\/github.com\/openssl\/openssl\/issues\/27160 Retrieved","author":"SSL.","year":"2025","unstructured":"OpenSSL. 2025. The AKI extension marked as critical. [Online]. https:\/\/github.com\/openssl\/openssl\/issues\/27160 Retrieved June 29, 2025."},{"key":"e_1_2_1_42_1","volume-title":"The handling of the CRL Number field by OpenSSL. [Online]. https:\/\/github.com\/openssl\/openssl\/ issues\/27085 Retrieved","author":"SSL.","year":"2025","unstructured":"OpenSSL. 2025. The handling of the CRL Number field by OpenSSL. [Online]. https:\/\/github.com\/openssl\/openssl\/ issues\/27085 Retrieved June 29, 2025."},{"key":"e_1_2_1_43_1","volume-title":"The OpenSSL parsed a GeneralName with an incorrect tag. [Online]. https:\/\/github.com\/openssl\/ openssl\/issues\/27251 Retrieved","author":"SSL.","year":"2025","unstructured":"OpenSSL. 2025. The OpenSSL parsed a GeneralName with an incorrect tag. [Online]. https:\/\/github.com\/openssl\/ openssl\/issues\/27251 Retrieved June 29, 2025."},{"key":"e_1_2_1_44_1","volume-title":"The OpenSSL parsed a revoked certificate with a reason code of 7. [Online]. https:\/\/github.com\/ openssl\/openssl\/issues\/27433 Retrieved","author":"SSL.","year":"2025","unstructured":"OpenSSL. 2025. The OpenSSL parsed a revoked certificate with a reason code of 7. [Online]. https:\/\/github.com\/ openssl\/openssl\/issues\/27433 Retrieved June 29, 2025."},{"key":"e_1_2_1_45_1","first-page":"1","article-title":"Hallucinating Certificates: Differential Testing of TLS Certificate Validation Using Generative Language Models. In 2026 IEEE\/ACM 48th International Conference on Software Engineering (ICSE)","author":"Paracha Muhammad Talha","year":"2026","unstructured":"Muhammad Talha Paracha, Kyle Posluns, Kevin Borgolte, Martina Lindorfer, and David Choffnes. 2026. Hallucinating Certificates: Differential Testing of TLS Certificate Validation Using Generative Language Models. In 2026 IEEE\/ACM 48th International Conference on Software Engineering (ICSE). ACM, 1-13.","journal-title":"ACM"},{"key":"e_1_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.27"},{"key":"e_1_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/3544548.3581178"},{"key":"e_1_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/3324884.3416552"},{"key":"e_1_2_1_49_1","doi-asserted-by":"crossref","unstructured":"Eric Rescorla. 2018. The Transport Layer Security (TLS) Protocol Version 1.","DOI":"10.17487\/RFC8446"},{"key":"e_1_2_1_50_1","unstructured":"RFC 8446. Internet Engineering Task Force (IETF). https:\/\/tools.ietf.org\/html\/rfc8446"},{"key":"e_1_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484580"},{"key":"e_1_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.46"},{"key":"e_1_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24084"},{"key":"e_1_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/3715785"},{"key":"e_1_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2008.60"},{"key":"e_1_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/3355048"},{"key":"e_1_2_1_57_1","volume-title":"The wolfSSL incorrectly handled the keyIdentifier field. [Online]. https:\/\/github.com\/wolfSSL\/wolfssl\/ issues\/8625 Retrieved","author":"SSL.","year":"2025","unstructured":"wolfSSL. 2025. The wolfSSL incorrectly handled the keyIdentifier field. [Online]. https:\/\/github.com\/wolfSSL\/wolfssl\/ issues\/8625 Retrieved June 29, 2025."},{"key":"e_1_2_1_58_1","volume-title":"Two AKI extensions. [Online]. https:\/\/github.com\/wolfSSL\/wolfssl\/issues\/8591 Retrieved","author":"SSL.","year":"2025","unstructured":"wolfSSL. 2025. Two AKI extensions. [Online]. https:\/\/github.com\/wolfSSL\/wolfssl\/issues\/8591 Retrieved June 29, 2025."},{"key":"e_1_2_1_59_1","volume-title":"wolfSSL accepts the incorrect GeneralizedTime value. [Online]. https:\/\/github.com\/wolfSSL\/wolfssl\/ issues\/8597 Retrieved","author":"SSL.","year":"2025","unstructured":"wolfSSL. 2025. wolfSSL accepts the incorrect GeneralizedTime value. [Online]. https:\/\/github.com\/wolfSSL\/wolfssl\/ issues\/8597 Retrieved June 29, 2025."},{"key":"e_1_2_1_60_1","volume-title":"wolfSSL cannot correctly process CRL files with extensions. [Online]. https:\/\/github.com\/wolfSSL\/ wolfssl\/issues\/8574 Retrieved","author":"SSL.","year":"2025","unstructured":"wolfSSL. 2025. wolfSSL cannot correctly process CRL files with extensions. [Online]. https:\/\/github.com\/wolfSSL\/ wolfssl\/issues\/8574 Retrieved June 29, 2025."},{"key":"e_1_2_1_61_1","volume-title":"wolfSSL is unable to correctly process the CRL serial number field. [Online]. https:\/\/github.com\/ wolfSSL\/wolfCLU\/issues\/174 Retrieved","author":"SSL.","year":"2025","unstructured":"wolfSSL. 2025. wolfSSL is unable to correctly process the CRL serial number field. [Online]. https:\/\/github.com\/ wolfSSL\/wolfCLU\/issues\/174 Retrieved June 29, 2025."},{"key":"e_1_2_1_62_1","volume-title":"WolfSSL parsed a CRL file with a negative CRL number value. [Online]. https:\/\/github.com\/wolfSSL\/ wolfssl\/issues\/8676 Retrieved","author":"SSL.","year":"2025","unstructured":"wolfSSL. 2025. WolfSSL parsed a CRL file with a negative CRL number value. [Online]. https:\/\/github.com\/wolfSSL\/ wolfssl\/issues\/8676 Retrieved June 29, 2025."},{"key":"e_1_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/3735129"},{"key":"e_1_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/3724393"},{"key":"e_1_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1145\/3708522"},{"key":"e_1_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670276"}],"container-title":["Proceedings of the ACM on Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3808212","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T18:29:10Z","timestamp":1782844150000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3808212"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,30]]},"references-count":66,"journal-issue":{"issue":"FSE","published-print":{"date-parts":[[2026,6,30]]}},"alternative-id":["10.1145\/3808212"],"URL":"https:\/\/doi.org\/10.1145\/3808212","relation":{},"ISSN":["2994-970X"],"issn-type":[{"value":"2994-970X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,6,30]]}}}