Metacrafter Registry

Datatypes

X.500 distinguished name (string form)

ID x500_distinguished_name

DatatypePersonal data (PII)identifierDraft

This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).

Name of an entry in an X.500 or LDAP directory and of the subject or issuer of an X.509 certificate, written as a string of attribute=value pairs, for example CN=..., O=..., C=... The string form is defined by RFC 4514 (pairs separated by commas, multi-valued names joined with +); certificate tools such as Windows CryptoAPI and OpenSSL print the same form with a space after each comma, use E for the email address and S or ST for the region, and may write an attribute by its OID. Russian qualified certificates add attributes such as ИНН, ОГРН and СНИЛС. The regexp needs at least two pairs and one common attribute (CN, O, OU, DC, UID, C, L, ST, S, STREET, E, SN, G or T), and values without an = sign. The slash form /C=RU/O=... of OpenSSL is not covered. The name of a person or the SNILS in it are personal data.

Categories
Cryptographic identifiers
Countries
Global (not tied to a country)
Languages
Common to most languages
Quality
80/100 · missing: mapping (Wikidata, Schema.org, ...), detector coverage
Metacrafter rules
no detection rule yet
Supported by tools
no tool record lists this type yet

Regular expression

^(?=(?:.*[,;+]\s*)?(?:CN|O|OU|DC|UID|C|L|ST|S|STREET|E|SN|G|T)=)(?:[A-Za-zА-ЯЁа-яё][A-Za-zА-ЯЁа-яё0-9-]*|(?:OID\.)?[0-2](?:\.\d+)+)=[^=]*(?:[,;+]\s*(?:[A-Za-zА-ЯЁа-яё][A-Za-zА-ЯЁа-яё0-9-]*|(?:OID\.)?[0-2](?:\.\d+)+)=[^=]*)+$

Python re syntax.

Examples

ValueDescription
UID=jsmith,DC=example,DC=netExample of RFC 4514, section 4
OU=Sales+CN=J. Smith,DC=example,DC=netMulti-valued relative name, RFC 4514, section 4
CN=GnuTLS certificate authority,ST=Leuven,OU=GnuTLS certificate authority,O=GnuTLS,C=BEIssuer of the example certificate of RFC 7468, section 5.1
CN=Минкомсвязь России, ИНН=007710474375, ОГРН=1047702026701, O=Минкомсвязь России, STREET=улица Тверская, дом 7, L=г. Москва, ST=77 Москва, C=RU, E=dit@minsvyaz.ruIssuer of Russian qualified certificates, as printed by CryptoAPI (e-trust.gosuslugi.ru)
CN=example.org invalidA single attribute; the regexp needs at least two
color=red, size=L invalidKey-value pairs without a directory attribute

Translations

LanguageNameDescription
RussianОтличительное имя X.500 (DN)Имя записи каталога X.500 или LDAP, владельца или издателя сертификата X.509 в виде строки пар атрибут=значение (CN=..., O=..., C=...). В российских квалифицированных сертификатах есть атрибуты ИНН, ОГРН, СНИЛС.

Sources

Use this record