DNs in Certificate Management SystemAppendix A Distinguished Names 317Note the following:• Value converter class converts a string to a ASN.1 value.• It must implement netscape.security.x509.AVAValueConverter interface.The string-to-value converter class can be one of these:• netscape.security.x509.PrintableConverter—converts a string to aPrintable String value. The string must have only printable characters.• netscape.security.x509.IA5StringConverter—converts a string to aIA5String value. The string must have only IA5String characters.• netscape.security.x509.DirStrConverter—converts a string to aDirectory (v3) String. The string is expected to be in DirectoryString formataccording to RFC 2253.• netscape.security.x509.GenericValueConverter—converts a stringcharacter by character in the following order, from smaller character sets tobroadest character set: Printable, IA5String, BMPString, Universal String.For example:X500Name.MY_ATTR.oid=1.2.3.4.5.6X500Name.MY_ATTR.class=netscape.security.x509.DirStrConverterAdding New or Proprietary AttributesTo add a new or proprietary attribute that’s not supported by CertificateManagement System by default:1. Stop the Certificate Manager.2. Go to this directory: /cert-/config3. Open the configuration file, CMS.cfg, in a text editor.4. Add the new attributes to the configuration file.For example, if you want to add three proprietary attributes, MYATTR1 that is adirectoryString, MYATTR2 that is a IA5String, and MYATTR3 that isPrintableStrings, you would add the following lines at the end of theconfiguration file:X500Name.attr.MYATTR1.oid=1.2.3.4.5.6X500Name.attr.MYATTR1.class=netscape.security.x509.DirStrConverterX500Name.attr.MYATTR2.oid=11.22.33.44.55.66X500Name.attr.MYATTR2.class=netscape.security.x509.
