getting cn from DN