DNs, RDNs, AVAs, and DER coding

   This means the subject DN in the certificate below is bad but no
   one from RSA has confirmed it.

   subject DN = {C=US},{O=RSA Data Security, Inc.},
                  {OU=Beta,OU=Commercial Certification Authority}

Hey, I'm from RSA !  That name looks bad !  (Where were you during our
Beta period?)

I'm happy to report that this CA is no longer in active use and we
will revoke any certificates for this CA.  Thanks for pointing this
out.

Cheers,
Steve Dusse
RSA