URL: https://github.com/freeipa/freeipa/pull/824 Title: #824: ca-add: validate Subject DN name attributes
frasertweedale commented: """ @felipevolpone I did think about that. I agree it would be nice but IMO it adds unnecessary implementation complexity, for handling a probably-rare user error. """
See the full comment at https://github.com/freeipa/freeipa/pull/824#issuecomment-305035882