Assertion: smart card's certificate | /r/HasProperty | the upn
Facets:
Source sentences:
text: If the client computer is not joined to the domain or if it is joined to a different domain, the client computer can resolve the server domain only by looking at the distinguished name on the certificate, not the UPN.