Cisco 5505 - ASA Firewall Edition Bundle Administrator's Manual page 80

Configuring Profile Attributes
Table 7-4
Identifier
CN
SN
GN
N
I
GENQ
DNQ
C
L
SP
ST
O
OU
T
EA
ISSUER-CN
ISSUER-SN
ISSUER-GN
ISSUER-N
ISSUER-I
ISSUER-GENQ
ISSUER-DNQ
"SSUER-C
ISSUER-L
ISSUER-SP
ISSUER-ST
ISSUER-O
ISSUER-OU
ISSUER-T
ISSUER-EA
The profile can contain none or more matching criteria. A certificate must match all specified criteria to
be considered a matching certificate. Distinguished Name matching offers additional match criteria,
including the ability for the administrator to specify that a certificate must or must not have the specified
string, as well as whether wild carding for the string should be allowed. See
AnyConnect Profile and XML Schema,"
Cisco AnyConnect VPN Client Administrator Guide
7-14
Chapter 7 Configuring and Using AnyConnect Client Operating Modes and User Profiles
Criteria for Certificate Distinguished Name Mapping
for an example.
Description
SubjectCommonName
SubjectSurName
SubjectGivenName
SubjectUnstructName
SubjectInitials
SubjectGenQualifier
SubjectDnQualifier
SubjectCountry
SubjectCity
SubjectState
SubjectState
SubjectCompany
SubjectDept
SubjectTitle
SubjectEmailAddr
IssuerCommonName
IssuerSurName
IssuerGivenName
IssuerUnstructName
IssuerInitials
IssuerGenQualifier
IssuerDnQualifier
IssuerCountry
IssuerCity
IssuerState
IssuerState
IssuerCompany
IssuerDept
IssuerTitle
IssuerEmailAddr
Appendix A, "Sample
OL-12950-012