In principle, RFC 5280
allows the use of arbitrary strings in the subject distinguished name (DN) of a certificate. Common fields are described in the X.520
standard. The length restrictions are also recommended by the ITU-T
. The abbreviations commonly used today are mainly taken from RFC 4519
.
However, Microsoft Active Directory Certificate Services only allows certain RDNs by default.
The following Relative Distinguished Names (RDNs) are accepted by the Active Directory Certificate Services (AD CS) certification authority by default:
Continue reading "Allowed Relative Distinguished Names (RDNs) in the Subject of Issued Certificates"