The Distinguished Name (DN) uniquely identifies an entity in an X.509 certificate.
|SERIALNUMBER||Certificate serial number|
|E||Email address (Deprecated in preference to MAIL)|
|UID or USERID||User identifier|
|OU||Organizational Unit name|
|STREET||Street / First line of address|
|ST (or SP or S)||State or Province name|
|PC||Postal code / zip code|
|DNQ||Distinguished name qualifier|
CN=John Smith, OU=Test, O=IBM, C=GB
The Common Name (CN) can describe an individual user or any other entity, for example a web server.
The DN can contain multiple OU and DC attributes. Only one instance of each of the other attributes is permitted. The order of the OU entries is significant: the order specifies a hierarchy of Organizational Unit names, with the highest-level unit first. The order of the DC entries is also significant.
IBM® WebSphere® MQ tolerates certain malformed DNs. For more information, see WebSphere MQ rules for SSLPEER values.