Are the private key Serial numbers and thumbprints the same as the corresponding public key Serial numbers and thumbprints for certificates (X509Certificates
, Base64-encoded X.509
), and are these good fields to compare on?
I am wanting to use this information as part of a validation process for a WCF web service, but want to be sure that both public and private keys hold the same hash or base64 values for comparison.
If these can be different, is there a better certificate field to use to validate?
The client will be signing their messages with their private key and I would be using their public key for the validation.