oxidecomputer / pki-playground

Tool for generating non-trivial X.509 certificate chains
Mozilla Public License 2.0
29 stars 2 forks source link

`CountryName` get encoded as `CommonName` #99

Closed flihp closed 6 months ago

flihp commented 6 months ago

The abbreviations from RFC 4519 get a bit confusing for things like CountryName and CommonName. The abbreviation for CountryName is C while CommonName is CN. We got that wrong in the code unfortunately and we're currently encoding the CountryName as a CommonName attribute. We're using the same attribute for the CommonName as well so a CSR or cert w/ both will have two CommonName attributes.