Group extraction uses DistinguishName