title: X.509 Standard set of attributes order
body: <p>I'm working with some legacy code, that implements a very basic X.509 parser. The code is quite old and I cannot distribute it.</p>
  <p>This code reads the standard set of attributes in issuer and subject sequentially and in a specific order. As a basic example:</p>
  <pre><code>C=XX, O=MyOrganization, OU=MyOrganizationalUnit,
  CN=myCommonName
  </code></pre>
  <p>So it would read the country, then the organization, and then the organizational unit and finally the common name.</p>
  <p>I've been reading the standard (<a href="https://www.rfc-editor.org/rfc/rfc5280#section-4.1.2.4" rel="nofollow noreferrer">https://www.rfc-editor.org/rfc/rfc5280#section-4.1.2.4</a>), (see section 4.1.2.4 and 4.1.2.6) and this legacy code somehow works with most certificates.</p>
  <p>The question is if this set of attributes must follow a specific order and where it says so or the opposite.</p>