Re: DNs, RDNs, AVAs, and DER coding

Peter,

        I think the most important point in your message was the
comment that the PEM RFCs "profile" X.509 to restrict the Subject and
Issuer fields to contain DNs, not just names.  This is in keeping with
the text of X.509 (section 7.2), which notes "A certification
authority produces the certificate of a user by signing a collection
of information, including the user's distinguished name and public
key."


Steve