also able to handle CA name with special signs