Go version

go version go1.24.1 linux/amd64

Output of go env in your module/workspace:

OU=,O=,L=,ST=,C=
2025-01-01 00:00:00 +0000 UTC
2025-12-01 00:00:00 +0000 UTC
1

What did you do?

RFC 5280 specifies that the number of DN values must be greater than or equal to 1, but I successfully printed the issuer name of a CRL file with an empty DN value using Go.

What did you see happen?

Go printed the CRL issuer as: OU=, O=, L=, ST=, C=.

What did you expect to see?

For comparison, when using GnuTLS to print this CRL file, it displayed the error: (error: get_issuer_dn: ASN1 parser: Value is not valid.).

main.zip

Comment From: dmitshur

CC @golang/security.