Netscape Certificate Management System 6.1, Administrator'S Manual

Page: 752 / 840

DNs in Certificate Management System
752 Netscape Certificate Management System Administrator’s Guide • February 2003
Extending Attribute Support
By default, Certificate Management System supports attribute identified in
Table I-2 on page 750. You can extend the list of attributes supported by server. The
syntax for adding additional X.500Name attributes (or components) is as follows:
X500Name.<NEW_ATTRNAME>.oid=<n.n.n.n>
X500Name.<NEW_ATTRNAME>.class=<string_to_DER_value_converter_class>
Note the following:
Directory String Any character in format as specified in Lightweight Directory Access Protocol
(v3): UTF-8 String Representation of Distinguished Names (see
http://www.ietf.org/rfc/rfc2253.txt
). Certificate Management
System conforms to all of this standard, including support of using hex
numbers to escape characters. The special characters are as follows:
,
=
+
<
>
#
;
They can be escaped by either a backslash (
\
) before the character or by
surrounding the value in double quotes (“ ”). A few examples are shown
below:
Example Corp. \, Ltd.
“Example Corp. , Ltd”
“Example Corp. \, Ltd”
Name \, with \= escaped \+ special \< characters \# like
\> or \”\\\;
“Name , with = s characters < surrounded > by #
quotes; ,=+<>#;”
Name with escaped characters like return \0D or C with
Caron \C4\8D or L\4C
Name with spaces at beginning and end
For additional more examples, check the standards.
Table I-3 Explanation of character sets for DNs (Continued)
Value type Character set allowed