The LDAPv3 specification is broken: 6.29. Printable String ( 1.3.6.1.4.1.1466.115.121.1.44 DESC 'Printable String' ) The encoding of a value in this syntax is the string value itself. The above is fine, but: PrintableString is limited to the characters in production p of section 4.1. is broken as the production p is not consistent with ASN.1 specifications of PrintableString. I suggest second sentence be deleted.