I have been trying to understand DN's generated by TIS and others and
asked a question which was not directly answered so let me phrase it in
terms of Rose.
Rose> { c=US, st=California, (o=DBC,l=Mountain View,l=Santa Clara)}
is illegal.
From a strict application of X.501 I can see that, but what about
{ c=US, st=California, o=DBC, l=Mountain View, l=Santa Clara}
From my reading of the X.500's this must be legal.
And so should
{ c=US, st=Confusion, (o=DBC, cn=MTRose), (l=Santa Clara, cn=Marshall)}
These DN's do not appear to be very disginguished, but they do appear
legal.
Peace ..Tom Jones