Re-Encoding of Certificate to from X509Certificate differs

[yschimke]

Certificate / TBSCertificate / SEQUENCE OF / SET OF / AttributeTypeAndValue
AttributeTypeAndValue(type=2.5.4.6, value=US)

This ordering of UTF-8 and PrintableString are not bi-directional

  private val attributeTypeAndValue: BasicDerAdapter<AttributeTypeAndValue> = Adapters.sequence(
      "AttributeTypeAndValue",
      Adapters.OBJECT_IDENTIFIER,
      Adapters.any(
          String::class to Adapters.UTF8_STRING,
          Nothing::class to Adapters.PRINTABLE_STRING,
          Unit::class to Adapters.TELETEX,
          AnyValue::class to Adapters.ANY_VALUE
      ),

https://www.alvestrand.no/objectid/2.5.4.6.html

oid: 2.5.4.6 - id-at-countryName
060355040613025553
vs
06035504060c025553

From #95

[yschimke]

Doesn't seem to break signatures. But does mean that #94 shouldn't optimistically convert to Certificate since that is a destructive operation.

[yschimke]

Probably not fatal, since the serial number and publicKeySha256 are unaffected.

Also see certificates have variability also

//github.com/sensu/sensu-go/issues/3985 (subtweeting)

But it is incorrect.