Re-enabled redirect based on known serial-ranges

redirect.go

@@ -26,13 +26,12 @@ func init() {
 }
 
 func GetIssuer(serial string, ccache *CertCache) (string, error) {
-	// convert to integer
+	// convert serial to integer
 	var sernum big.Int
 	_, ok := sernum.SetString(serial, 10)
 	if !ok {
 		return "", errorCannotConvert
 	}
-	/* auskommentiert, weil: das erlaubt dann nicht-legale seriennummern an den gesicherten enden
 	// alte CA (kurze nummern, serial kleiner als erstes g2)
 	if len(serial) == 8 || len(serial) == 14 || sernum.Cmp(&serialG2First) < 1 {
 		return kitcag1, nil
@@ -41,7 +40,6 @@ func GetIssuer(serial string, ccache *CertCache) (string, error) {
 	if sernum.Cmp(&serialG1Final) == 1 {
 		return kitcag2, nil
 	}
-	*/
 	// check certificate cache
 	fromcache := ccache.Get(serial)
 	if fromcache == nil {