SUBJECTN—Certificates DN

Valid on z/OS.

Use the SUBJECTN keyword to specify the ACID's distinguished name in a digital certificate. The values override the values contained in the certificate request in the DCDSN data set. The attributes can consist of:

229 characters for a self‑signed certificate
255 characters for a non‑self‑signed certificate

You can use A‑Z and 0‑9. The exception is C=COUNTRY. This is a 2‑digit value field.

If DCDSN or SUBJECTN is not specified, the SUBJECTN defaults to the acid's name field.

Notes:

If any of the values contain blanks, they must be enclosed in double quotes.
The complete SUBJECTN phrase is enclosed in parentheses and single quotes.
The attributes are separated by spaces. No matter how many spaces there are between attributes, they count as one space.
Each attributes has a limit of 64 characters

This keyword has the following format:

TSS GENCERT SUBJECTN{('CN="common‑name"
                     T="title"
                     OU="organizational‑unit‑name1,
                       organizational‑unit‑name2"
                     O="organizational‑name"
                     L="locality"
                     ST="state—or—province"
                     C="2‑digit‑only‑country"')}

This keyword used with:

The GENCERT command
The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
ACID(MAINTAIN)and MISC4(CERTGEN) authority
MISC4(CERTSITE) for CERTSITE ACID and MISC4(CERTAUTH) for CERTAUTH ACID

Example: SUBJECTN keyword

This example specifies SUBJECTN:

TSS GENCERT(user1) DIGICERT(cert00001)
                   SUBJECTN ('CN=john doe OU=payroll')

This example specifies a SUBJECTN parameter value which contains blanks enclosed within double quotes:

TSS GENCERT(user1) DIGICERT(cert00001)
                   SUBJECTN ('CN="john doe" O="Company" OU="TSS Development"')