A distinguished name (DN) attribute you want to rename using the rdn-corrections.<i>.rep-with parameter.
Specifically, some Entrust Certificate Services profiles may include legacy attribute names in the subject of the issued certificates. However, these attribute names may not be compatible with the industry-standard names used by some client applications.
Entrust Certificate Services legacy attribute name | Industry-accepted attribute name |
---|---|
jurisdictionOfIncorporationStateOrProvinceName | jurisdictionStateOrProv |
jurisdictionOfIncorporationCountryName | jurisdictionCountryName |
In this case, add the following lines to the CA Gateway configuration.
rdn-corrections.0.rep: jurisdictionCountryName
rdn-corrections.0.rep-with: jurisdictionOfIncorporationCountryName
rdn-corrections.1.rep: jurisdictionStateOrProvinceName
rdn-corrections.1.rep-with: jurisdictionOfIncorporationStateOrProvinceName
Before sending certificate renewal requests to Entrust Certificate Services, CA Gateway will apply this configuration and replace industry-compliant subject attributes with legacy ones.
CN=test.com, serialNumber=705421, businessCategory=Private Organization, O=Entrust Corporation, jurisdictionStateOrProv=Delaware, jurisdictionCountryName=US, L=Shakopee, ST=Minnesota
CN=test.com, serialNumber=705421, businessCategory=Private Organization, O=Entrust Corporation, jurisdictionOfIncorporationStateOrProvinceName=Delaware, jurisdictionOfIncorporationCountryName=US, L=Shakopee, ST=Minnesota
Mandatory: Only when renewing certificates with Entrust Certificate Services.