You have to look at the character string type of the DN. For example, in printableString the exclamation point is an illegal character.
-- Principal Security Engineer Akamai Technologies, Cambridge MA IM: rs...@jabber.me<mailto:rs...@jabber.me> Twitter: RichSalz
