diff --git a/.github/workflows/x509-tsp.yml b/.github/workflows/x509-tsp.yml
new file mode 100644
index 000000000..d7a923b1b
--- /dev/null
+++ b/.github/workflows/x509-tsp.yml
@@ -0,0 +1,46 @@
+name: x509-tsp
+
+on:
+  pull_request:
+    paths:
+      - ".github/workflows/x509-tsp.yml"
+      - "const-oid/**"
+      - "cmpv2/**"
+      - "cms/**"
+      - "der/**"
+      - "spki/**"
+      - "x509-cert/**"
+      - "x509-tsp/**"
+      - "Cargo.*"
+  push:
+    branches: master
+
+defaults:
+  run:
+    working-directory: x509-tsp
+
+env:
+  CARGO_INCREMENTAL: 0
+  RUSTFLAGS: "-Dwarnings"
+
+jobs:
+  minimal-versions:
+    uses: RustCrypto/actions/.github/workflows/minimal-versions.yml@master
+    with:
+        working-directory: ${{ github.workflow }}
+
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        rust:
+          - 1.65.0 # MSRV
+          - stable
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: dtolnay/rust-toolchain@master
+        with:
+          toolchain: ${{ matrix.rust }}
+      - uses: RustCrypto/actions/cargo-hack-install@master
+      - run: cargo hack test --feature-powerset
diff --git a/x509-tsp/src/lib.rs b/x509-tsp/src/lib.rs
index dfb629141..1f9bdac87 100644
--- a/x509-tsp/src/lib.rs
+++ b/x509-tsp/src/lib.rs
@@ -214,10 +214,7 @@ mod tests {
             GeneralName::DirectoryName(n) => n,
             _ => panic!(),
         };
-        assert_eq!(
-            dn.to_string(),
-            "C=US,STATEORPROVINCENAME=Some-State,O=Test,CN=Test TSA"
-        );
+        assert_eq!(dn.to_string(), "CN=Test TSA,O=Test,ST=Some-State,C=US");
         assert_eq!(
             tst.message_imprint.hashed_message.as_bytes(),
             hex!("ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad")