The encoding of certificate subject name to a string uses an OID database we've grabbed from IANA. However this database is constantly changing with newer entries being added. This can be a problem as changes to the database can mean changes to what strings are generated. And right now the system requires the strings to be perfectly identical. At the moment we "handle" this by never updating our copy of the database. But it would be nice if we had something more robust in place.
