In X509_Certificate::to_string, don't print key ids if empty

Reduce size of serial numbers of new certs from 256 to 128 bits;
2**64 certs is _probably_ sufficient, given that it would take hundreds
of exabytes of storage to hold that many certificates. :)

1 files changed, 1 insertions, 1 deletions

diff --git a/src/cert/x509ca/x509_ca.cpp b/src/cert/x509ca/x509_ca.cpp
index 9cb4c0a7f..40f2e3b3a 100644
--- a/src/cert/x509ca/x509_ca.cpp
+++ b/src/cert/x509ca/x509_ca.cpp
@@ -98,7 +98,7 @@ X509_Certificate X509_CA::make_cert(PK_Signer* signer,
                                     const Extensions& extensions)
    {
    const size_t X509_CERT_VERSION = 3;
-   const size_t SERIAL_BITS = 256;
+   const size_t SERIAL_BITS = 128;
 
    BigInt serial_no(rng, SERIAL_BITS);