There's no reason why the first digit of an OID can't be 0.

OK claudio@
"Good find" deraadt@

src/lib/libutil/ber.c

@@ -1,4 +1,4 @@
-/*	$OpenBSD: ber.c,v 1.9 2019/06/01 19:40:05 rob Exp $ */
+/*	$OpenBSD: ber.c,v 1.10 2019/08/05 12:30:50 martijn Exp $ */
 
 /*
  * Copyright (c) 2007, 2012 Reyk Floeter <reyk@openbsd.org>
@@ -546,9 +546,6 @@ ber_get_oid(struct ber_element *elm, struct ber_oid *o)
 	buf = elm->be_val;
 	len = elm->be_len;
 
-	if (!buf[i])
-		return (-1);
-
 	memset(o, 0, sizeof(*o));
 	o->bo_id[j++] = buf[i] / 40;
 	o->bo_id[j++] = buf[i++] % 40;