Does RFC5280 require the RDNSequence in the CRL Issuer field to be output in reverse order in the string?

Question

I saw in RFC 4514 that the RDNSequence should be output in reverse order in the string (for example: RDNSequence (binary order): [C=US, O=Example, CN=CA]

String representation (RFC 4514): CN=CA,O=Example,C=US). I did not find any related specification in RFC 5280. Could you please confirm whether RFC 5280 also requires the RDNSequence to be output in reverse order in the string?

Crypt32 · Accepted Answer · 2025-04-28 07:40:45Z

0

All types of ASN.1 DirectoryName type are encoded from root down to leaf X.520 node. String representation is formatted in reverse order: from leaf down to root node. Issuer field in certificates and CRLs are of type of DirectoryName, so same rules apply.

answered Apr 28 at 7:40

Crypt32

14.2k3 gold badges49 silver badges77 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Does RFC5280 require the RDNSequence in the CRL Issuer field to be output in reverse order in the string?

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related