Policy Server Guides › Policy Design Guide › SiteMinder Test Tool › Certificate-based Authentication Tests › Custom Attribute Mappings for Testing › Issuer DN Mapping

Previous Topic: Custom Attribute Mappings for Testing

Next Topic: Create Custom Certificate Mappings
Issuer DN Mapping

Different certificate-generation tools (such as certutil.exe and OpenSSL) create the Issuer DN in slightly different ways. For example, one tool could possibly create an Issuer DN like the following:

CN=Personal Freemail RSA 2000.8.30, OU=Certificate Services, O=Thawte, L=Cape Town, S=Western Cape, C=ZA

Another tool could possibly create an Issuer DN like the following:

CN=Personal Freemail RSA 2000.8.30, OU=Certificate Services, O=Thawte, L=Cape Town, ST=Western Cape, C=ZA

To support both possibilities, have your administrator create mappings in the Policy Server for both Issuer DN formats.

Note: For more information about the actual values used by a specific certificate-generation tool, see the documentation provided by the vendor of your certificate-generation tool.