So, if you run your own CA and allow only certificates from this CA to be accepted by the server, the serial number is the most reliable (albeit not very mnemonic) means to identify a user.

• 所以，如果你运行自己的CA并且只允许服务器接受来自这个CA的证书，那么序列号就是标识一个用户最可靠的手段了（尽管不太好记）。