>The DNs of these are structurally different, one being
>/DC=org/DC=python/CN=foo/CN=bar and the other
>/DC=org/DC=python/CN=foo2+CN=bar2

Ah, I see what you're driving at.

You can inspect them yourself by looking at the certs with openssl:

% openssl x509 -text -in attachment-0002.crt 
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a9:29:70:b4:3a:72:27:5a
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=org, DC=python, CN=foo, CN=bar
        Validity
            Not Before: Sep  5 05:38:20 2007 GMT
            Not After : Sep  4 05:38:20 2008 GMT
        Subject: DC=org, DC=python, CN=foo, CN=bar
        Subject Public Key Info
        ...

% openssl x509 -text -in attachment-0003.crt 
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            82:0a:4f:36:0f:ab:1a:c3
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=org, DC=python, CN=bar2, CN=foo2
        Validity
            Not Before: Sep  5 05:43:26 2007 GMT
            Not After : Sep  4 05:43:26 2008 GMT
        Subject: DC=org, DC=python, CN=bar2, CN=foo2
        Subject Public Key Info:

The hierarchy information does not appear to be preserved.

Bill

_______________________________________________
Python-Dev mailing list
Python-Dev@python.org
http://mail.python.org/mailman/listinfo/python-dev
Unsubscribe: 
http://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Reply via email to