Tom Jones wrote:
So,
{ c=US, st=California, (o=DBC,l=Mountain View)}
is legal, but
{ c=US, st=California, (o=DBC,l=Mountain View,l=Santa Clara)}
is illegal.
- - - - - - - - - - - -
Sorry to respond so late, but I can't find any place in X.509-1988 where
this is precluded. I know that it is hard to order sets when the tags
are the same, but the wording does not seem to prevent it.
Yes it does.
From ISO/IEC 9594-2 | X.501 (1988)
7.4.2 At most one of the values of an attribute may be designated
as a distinguished value, in which case the attribute value appears
in the relative distinguished name (see 8.3) of the entry.
The second example above attempts to use more than one value for
Locality as an RDN, which violates this sentence.
Is it still unclear?
--
KENR(_at_)SHL(_dot_)COM