Hi, I have updated the defect report on a DNS name attribute type by adding a special matching rule (see <http://x500standard.com/uploads/Ig/DR_395.pdf> http://x500standard.com/uploads/Ig/DR_395.pdf). I am not sure whether we need a substring matching rule. Within the next few days I will generate a draft technical corrigendum to X.520 for ballot to be completed before the September meeting. Erik