[Python-Dev] frozenset C API?

[Bill Janssen]

> OK, I can make it a tuple (list of RDNs) of tuples (one for each RDN)
> of tuples (one for each attribute in the RDN).

Which gets us to this:

{'issuer': ((('countryName', u'US'),),
            (('stateOrProvinceName', u'Delaware'),),
            (('localityName', u'Wilmington'),),
            (('organizationName', u'Python Software Foundation'),),
            (('organizationalUnitName', u'SSL'),),
            (('commonName', u'somemachine.python.org'),)),
 'notAfter': 'Feb 16 16:54:50 2013 GMT',
 'notBefore': 'Aug 27 16:54:50 2007 GMT',
 'subject': ((('countryName', u'US'),),
             (('stateOrProvinceName', u'Delaware'),),
             (('localityName', u'Wilmington'),),
             (('organizationName', u'Python Software Foundation'),),
             (('organizationalUnitName', u'SSL'),),
             (('commonName', u'somemachine.python.org'),)),
 'version': 2}

and

{'issuer': ((('countryName', u'US'),),
            (('organizationName', u'VeriSign, Inc.'),),
            (('organizationalUnitName', u'VeriSign Trust Network'),),
            (('organizationalUnitName',
              u'Terms of use at https://www.verisign.com/rpa (c)06'),),
            (('commonName',
              u'VeriSign Class 3 Extended Validation SSL SGC CA'),)),
 'notAfter': 'May  8 23:59:59 2009 GMT',
 'notBefore': 'May  9 00:00:00 2007 GMT',
 'subject': ((('serialNumber', u'2497886'),),
             (('1.3.6.1.4.1.311.60.2.1.3', u'US'),),
             (('1.3.6.1.4.1.311.60.2.1.2', u'Delaware'),),
             (('countryName', u'US'),),
             (('postalCode', u'94043'),),
             (('stateOrProvinceName', u'California'),),
             (('localityName', u'Mountain View'),),
             (('streetAddress', u'487 East Middlefield Road'),),
             (('organizationName', u'VeriSign, Inc.'),),
             (('organizationalUnitName', u'Production Security Services'),),
             (('organizationalUnitName',
               u'Terms of use at www.verisign.com/rpa (c)06'),),
             (('commonName', u'www.verisign.com'),)),
 'version': 2}

Ugly, but accurate.  Or is it?  Do you really think that
"serialNumber" is at the top of a naming tree somewhere?

Bill