If an attribute's syntax definition allows the representation which consists of zero bytes, then an empty string is a legal value for that attribute. I don't think X.520 has a lower bound on the number of characters in 'name' and the Directory String syntax. Mark