Citrix Systems Network Router 9.2 User Manual

certificate.SUBJECT

Returns the Distinguished Name of the Subject as 
a name-value. An equals sign (“=”) separates 
names and values and a slash (“/”) delimits name-
value pairs.

Following is an example: 

/C=US/O=myCompany/OU=www.
mycompany.com/CN=www.mycompany.
com/
emailAddress=myuserid@mycompany.
com

certificate.SUBJECT.
IGNORE_EMPTY_ELEMENTS 

Returns the Subject as a name-value list, but 
ignores the empty elements in the list. For 
example, consider the following:

Cert-Issuer: /c=in/st=kar//

l=bangelore //o=mycompany/ou=sales/ /

emailAddress=myuserid@mycompany.com

The following Rewrite action returns a count of 6 
based on the preceding Issuer definition:

sh rewrite action insert_ssl_header

Name: insert_ssl

Operation: insert_http_header   

Target:Cert-Issuer

Value:CLIENT.SSL.CLIENT_CERT.ISSUER.

COUNT

However, if you change the value to the following, 
the returned count is 9:

CLIENT.SSL.CLIENT_CERT.ISSUER.
IGNORE_EMPTY_ELEMENTS.COUNT

certificate.
SUBJECT_KEYID

Returns the Subject KeyID of the client certificate. 
If there is no Subject KeyID, this operation returns 
a zero-length text object.