When I looked the digital signature properties of LSASS.EXE, I am presented with this:
Which states Serial Number 33 00 00 ... 00 CC
. Fair enough.
When I looked the attached digital certificate properties, what I see is:
.
Which has the exact serial number presented in SIGNATURE. Why is this? Is the serial number part of certificate or signature?
Further, the thumb-print of certificate is mentioned as:
Which is a different one.
So, what does uniquely identify a signature - a thumbprint or a serial number?