What we'd really need here is an indication from vendors of how far UTF-8 support goes (or doesn't go) in their products, to determine whether it's safe to switch it on yet. The most important one would be Microsoft I guess. I'll start the ball rolling by saying that any version of cryptlib that handles certs will process UTF-8, although none will produce it (at least in a DN) for the reason given above.
Steve. -- Dr Stephen N. Henson. Core developer of the OpenSSL project: http://www.openssl.org/ Freelance consultant see: http://www.drh-consultancy.co.uk/ Email: shenson@xxxxxxxxxxxxxxxxxxxxx, PGP key: via homepage.