pem-dev
[Top] [All Lists]

Re: Question about DNs

1993-06-14 12:48:00
      Yes, it is legitimate, in fact, likely, that an RDN with
multiple AVAs would have different attribute types.

Regrettably, the above statement is misleading.  Let's be concrete:

1. An RDN consists of AT LEAST ONE AVA.

2. An attribute type can occur AT MOST ONCE in an RDN.

So,

        { c=US, st=California, (o=DBC,l=Mountain View)}

is legal, but

        { c=US, st=California, (o=DBC,l=Mountain View,l=Santa Clara)}

is illegal.

/mtr

<Prev in Thread] Current Thread [Next in Thread>