Summary

I would like to share a real‑world misissuance case that may help improve ZLint’s ability to detect malformed Subject attributes.

Background / Context

I previously submitted a related Bugzilla report:
https://bugzilla.mozilla.org/show_bug.cgi?id=2004654

As a follow‑up, I’m providing an additional certificate example that exhibits an incorrectly constructed Subject attribute, which may be useful for refining ZLint’s lint coverage.

Real‑world Example

Certificate:
https://crt.sh/?sha256=2E4CD75510F999F1DC1C986BCD7C0BDB9BF9D622843A8B3B32379A4EED0F0B7F

Subject:

stateOrProvinceName = Tokyo, C=JP

As shown above, the value of the stateOrProvinceName attribute erroneously includes C=JP, which should not appear inside this field.

Expected behavior

ZLint should detect malformed Subject attribute values where components such as C=XX appear incorrectly embedded within another RDN.

Actual behavior

This case does not appear to trigger an existing lint.

Additional Information

We have already addressed the underlying issue on our side, but I believe this example may help strengthen ZLint’s handling of malformed Subject attribute structures.

Thank you for your ongoing work on ZLint and your support of the broader PKI ecosystem.

Best regards,
ONO Fumiaki / 大野 文彰
SECOM Trust Systems CO., LTD.
(Japanese name order: family name first, in uppercase)