Good day everybody.
Have problem with using Subset (like O, OU, ST, L,C and e-mail) in CA certificate.
I create new prifile with activating:
- Use a Subset of Subject DN
- Subset of SubjectDN
When i create new CA with newly created profile - there are no fields (like O, OU, ST, L,C and e-mail)
The subset in Certificate Profiles is used to limit the available fields in a CA or end entity certificate. If you select Use a subset and select for example CN, O and then enter a CA SubjectDN of CN=TestCA,O=Org,C=SE only CN=TestCA,O=Org will show up in the certificate.
Thanks. It is realy working!
Is there a way to do the opposite? What if I want to use more than one OU?
The opposite (adding fields that are not in the registered User) is not possible) in the GUI.
There is through WebService a function for "merging" DNs, based in the registered value, and pre-defined fields in the end entity profile. You could take a look at that, if you are advanced.