MUST match the common name used in the SSL/TLS certificate https://w3c-ccg.github.io/did-method-web/#method-specific-identifier

rfc5280: When comparing DNS names for equality, [x.509 impls] MUST perform a case-insensitive exact match on the entire DNS name

so i guess you can normalize if needed?

Comments