Details for processing subject's and issuer's name filters
- The sequence shown in How RACF processes certificate name filters is followed,
until the full subject's name and issuer's name is used to check for
a matching profile in the DIGTNMAP class, to determine if there is
an applicable certificate name filter.
Result: No DIGTNMAP profile is found to match:
CN=Timo Kokkonen.OU=Sales.OU=Los Angeles.OU=US.O=World Sales Corp | OU=VeriSign Class 1 Individual Subscriber.O=VeriSign, Inc.L=Internet
- A partial subject's name is formed by removing the most specific
node (the CN node) and used to check for a matching profile in the
DIGTNMAP class.
Result: No DIGTNMAP profile is found to match:
OU=Sales.OU=Los Angeles.OU=US.O=World Sales Corp | OU=VeriSign Class 1 Individual Subscriber.O=VeriSign, Inc.L=Internet
- The next partial subject's name is formed by removing the next
most specific node (OU=Sales) and used to check for
a matching profile in the DIGTNMAP class.
Result: No DIGTNMAP profile is found to match:
OU=Los Angeles.OU=US.O=World Sales Corp | OU=VeriSign Class 1 Individual Subscriber.O=VeriSign, Inc.L=Internet
- The next partial subject's name is formed by removing the next
most specific node (OU=Los Angeles) and used to check
for a matching profile in the DIGTNMAP class.
Result: No DIGTNMAP profile is found to match:
OU=US.O=World Sales Corp | OU=VeriSign Class 1 Individual Subscriber.O=VeriSign, Inc.L=Internet
- The last partial subject's name is formed by removing the next
most specific node (OU=US) and used to check for
a matching profile in the DIGTNMAP class.
Result: No DIGTNMAP profile is found to match:
O=World Sales Corp | OU=VeriSign Class 1 Individual Subscriber.O=VeriSign, Inc.L=Internet
- The full issuer's name is then used to check for a matching profile
in the DIGTNMAP class.
Result: A DIGTNMAP profile is found to match:
OU=VeriSign Class 1 Individual Subscriber.O=VeriSign, Inc.L=Internet
- Processing by initACEE continues using the user ID WEBUSER for the Timo's certificate.