This notation is designed to be convenient for common forms of name. This section gives a few examples of distinguished names written using this notation. An example name in which an RDN was of an unrecognized type. The following security considerations are specific to the handling of distinguished names. Disclosure Distinguished Names typically consist of descriptive information about the entries they name, which can be people, organizations, devices or other real-world objects.
Most countries have privacy laws regarding the publication of information about people.
The transformations of an AttributeValue value from its X.501 form to an LDAP string representation are not always reversible back to the same BER or DER form. An example of a situation which requires the DER form of a distinguished name is the verification of an X.509 certificate. This document is an update to RFC 2253, by Mark Wahl, Tim Howes, and Steve Kille. RFC 2253 was a product of the IETF ASID Working Group. This document is a product of the IETF LDAPbis Working Group.