Keywords › SUBJECTN Keyword—Certificate DN

SUBJECTN Keyword—Certificate DN

Valid on z/OS.

Use the SUBJECTN keyword to specify the ACID's distinguished name in a digital certificate. The values override the values contained in the certificate request in the DCDSN data set. The attributes can consist of:

• 229 characters for a self-signed certificate if SDNSIZE(255) control option is specified, 1007 characters if SDNSIZE(1024) control option is specified
• 255 characters for a non self-signed certificate if SDNSIZE(255) control option is specified, 1024 characters if SDNSIZE(1024) control option is specified
• 229 characters for a certificate added to CERTAUTH if SDNSIZE(255) control option is specified, 1007 characters if SDNSIZE(1024) control option is specified

You can use A‑Z and 0‑9. The exception is C=COUNTRY. This is a 2‑digit value field.

If you do not specify DCDSN or SUBJECTN, the SUBJECTN defaults to the ACID's name field.

Notes:

• If any of the values contain blanks, enclose them in double quotes.
• The complete SUBJECTN phrase is enclosed in parentheses and single quotes.
• The attributes are separated by spaces. No matter how many spaces exist between attributes, they count as one space.
• Each attributes has a limit of 64 characters.
• You can specify multiple values for the organizational unit (OU=).

This keyword has the following format:

TSS GENCERT SUBJECTN{('CN="common‑name"
                     T="title"
                     OU="organizational‑unit‑name1"
                     O="organizational‑name"
                     L="locality"
                     ST="state—or—province"
                     C="2‑digit‑only‑country"')}

This keyword is used with:

• The GENCERT and RENEW commands
• The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
• ACID(MAINTAIN)and MISC4(CERTGEN) authority
• MISC4(CERTSITE) for CERTSITE ACID and MISC4(CERTAUTH) for CERTAUTH ACID

Example: SUBJECTN keyword

This example specifies SUBJECTN:

TSS GENCERT(user1) DIGICERT(cert00001)
                   SUBJECTN ('CN="john doe" OU=payroll')

This example specifies a SUBJECTN parameter value that contains blanks enclosed within double quotes:

TSS GENCERT(user1) DIGICERT(cert00001)
                   SUBJECTN ('CN="john doe" O=Company OU="TSS Development"')

This example specifies a SUBJECTN parameter value that contains multiple values for organizational unit:

TSS GENCERT(user1) DIGICERT(cert00001)
                   SUBJECTN ('CN="john doe" OU=payroll OU=accounting')