Rules for applying filtering conditions

When filtering conditions are configured, certificates that can be used are verified in accordance with the following rules.

• The value must match exactly.
• If multiple filtering conditions are configured, all of them must be satisfied.
  (When multiple filtering conditions are configured, the order of attributes in the subject is ignored.)

Examples of filtering conditions

Example 1. When restricting by the organization name (Organization)

Certificates that can be used are restricted by the organization name (Organization) of each certificate.

• Filtering condition to be configured

  Attribute	Value
  O(Organization)	IIJ

• Example of a certificate that can be used

  Subject of the certificate	Availability	Comments
  O=IIJ,OU=Business,CN=iij-taro	Yes	O=IIJ is included
  O=IIJ-global,OU=Business,CN=iij-taro	×	O=IIJ is not included

Example 2. When restricting by multiple filtering conditions

Configure multiple filtering conditions.

• Filtering condition to be configured

  Attribute	Value
  O(Organization)	IIJ
  OU(Organization Unit)	Business

• Example of a certificate that can be used

  	Subject of the certificate	Availability	Comments
  (1)	O=IIJ,OU=Business,OU=Sales,CN=iij-taro	Yes	O=IIJ and OU=Business are included
  (2)	O=IIJ,OU=Sales,OU=Business,CN=iij-taro	Yes	O=IIJ and OU=Business are included, but the order is different from (1)
  (3)	OU=Business,OU=Sales,O=IIJ,CN=iij-taro	Yes	O=IIJ and OU=Business are included, but the order is different from (1) and (2)
  (4)	O=IIJ-global,OU=Business,OU=Sales,CN=iij-taro	×	OU=Business is included, but O=IIJ is not included