GnuTLS library certificate spoofing

It's possible to spoof cerificate name with NULL byte; weak MD2-hashed signatures are accepted...