Each domainComponent attribute represents a
single label. To represent a label from an IDN in the distinguished
name, the implementation MUST perform the "ToASCII" label conversion
specified in Section 4.1 of RFC 3490. The label SHALL be considered
a "stored string". That is, the AllowUnassigned flag SHALL NOT be
Conforming implementations shall perform a case-insensitive exact
match when comparing domainComponent attributes in distinguished
names, as described in Section 7.2.
Implementations should convert ACE labels to Unicode before display.
Specifically, conforming implementations should perform the
"ToUnicode" conversion operation specified, as described in Section
7.2, on each ACE label before displaying the name.