amazon-archives / certlint

X.509 certificate linter
Apache License 2.0
157 stars 42 forks source link

Incorrect warning on multiple attributes in one RDN #64

Open YuryStrozhevsky opened 6 years ago

YuryStrozhevsky commented 6 years ago

In your code you have this warning on having "multiple attributes in one RDN" in one certificate. In fact I do not understand the warning and why you made it.

As from initial type definition we have this:

RDNSequence ::= Sequence OF RelativeDistinguishedName

RelativeDistinguishedName ::=
SET SIZE (1..MAX) OF AttributeTypeAndValue

And nothing stops us from having multiple AttributeTypeAndValue - could be (1..MAX) values inside one RelativeDistinguishedName.

So, could you describe why you made the warning in certlint?