want string
	}{
		{
			seq: pkix.RDNSequence{
				pkix.RelativeDistinguishedNameSET{
					pkix.AttributeTypeAndValue{Type: oidCountry, Value: "US"},
				},
				pkix.RelativeDistinguishedNameSET{
					pkix.AttributeTypeAndValue{Type: oidOrganization, Value: "Widget Inc."},
				},
				pkix.RelativeDistinguishedNameSET{
					pkix.AttributeTypeAndValue{Type: oidOrganizationalUnit, Value: "Sales"},

	if !raw.ReadASN1(&raw, cryptobyte_asn1.SEQUENCE) {
		return nil, errors.New("x509: invalid RDNSequence")
	}

	var rdnSeq pkix.RDNSequence
	for !raw.Empty() {
		var rdnSet pkix.RelativeDistinguishedNameSET
		var set cryptobyte.String
		if !raw.ReadASN1(&set, cryptobyte_asn1.SET) {
			return nil, errors.New("x509: invalid RDNSequence")
		}
		for !set.Empty() {
			var atav cryptobyte.String

		{"Name.PostalCode", Field, 0},
		{"Name.Province", Field, 0},
		{"Name.SerialNumber", Field, 0},
		{"Name.StreetAddress", Field, 0},
		{"RDNSequence", Type, 0},
		{"RelativeDistinguishedNameSET", Type, 0},
		{"RevokedCertificate", Type, 0},
		{"RevokedCertificate.Extensions", Field, 0},
		{"RevokedCertificate.RevocationTime", Field, 0},
		{"RevokedCertificate.SerialNumber", Field, 0},