Subject: GOST: Bad DNs in RFC 4491 examples

From: "Manger, James H" <[email-masked]>
Date: Tue, 30 May 2006 15:02:35 +1000

I guess it is too late to put sensible distinguished names in the sample certificates [issuer and subject fields in certs from sections 4.1 and 4.2].

1. An email address should go in the subjectAltName.rfc822Name extension.  [Actually it MUST go there according to the last paragraph of section 4.1.2.6 "Subject" in RFC 3280]
2. The country, org and common name RDNs are in the wrong order.

Current DN (in pseudo RFC2253 format and pseudo value notation):

EMAILADDRESS=[email-masked],C=RU,O=CryptoPro,CN=GostR3410-94 example

 subject rdnSequence:{
   commonName utf8String:"GostR3410-94 example"
   / organizationName utf8String:"CryptoPro"
   / countryName "RU"
   / emailAddress "[email-masked]"
 },