My NASA PIV card has one. The ambiguity of ordering in the string representation does in fact cause problems.
On Jun 4, 2010, at 10:11 AM, Nelson B Bolyard wrote: >> You can have two AVAs of the same type in the on RDN, i.e. >> two common names in the same RDN. There the interpretation >> of most-significant is not clear. > > Agreed, in principle. In practice, I've never seen a certificate produced > by a real CA with multiple AVAs in a single RDN. I've seen them in certs > produced by test scripts, and by people playing with OpenSSL. :) ------------------------------------------------------ The opinions expressed in this message are mine, not those of Caltech, JPL, NASA, or the US Government. [email protected], or [email protected] _______________________________________________ certid mailing list [email protected] https://www.ietf.org/mailman/listinfo/certid
