The default encoding is IA5String for the emailAddress (E) attribute
and PrintableString for all other attributes.
If the input string includes characters that are not valid for these encodings, then
a T61String (TeletexString) will be used instead as a fudge.
Certificates created with a T61String may not be accepted as valid by some profiles.
To force UTF-8 encoding, specify the PKI_X509_UTF8 flag.