Also RFC4514 suggests we always use = even if we don't recognise an OID.