You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by pa...@apache.org on 2009/10/21 19:02:19 UTC

svn commit: r828105 [3/8] - /directory/studio/trunk/schemaeditor/resources/schemas/apacheds/

Modified: directory/studio/trunk/schemaeditor/resources/schemas/apacheds/core.xml
URL: http://svn.apache.org/viewvc/directory/studio/trunk/schemaeditor/resources/schemas/apacheds/core.xml?rev=828105&r1=828104&r2=828105&view=diff
==============================================================================
--- directory/studio/trunk/schemaeditor/resources/schemas/apacheds/core.xml (original)
+++ directory/studio/trunk/schemaeditor/resources/schemas/apacheds/core.xml Wed Oct 21 17:02:18 2009
@@ -18,1089 +18,1088 @@
   under the License.
 -->
 <schema name="core">
-   <attributetypes>
-      <attributetype oid="2.5.4.9" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>street</alias>
-            <alias>streetAddress</alias>
-         </aliases>
-         <description>RFC2256: street address of this object</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.12" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>title</alias>
-         </aliases>
-         <description>RFC2256: title associated with the entity</description>
-         <superior>name</superior>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.8" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>st</alias>
-            <alias>stateOrProvinceName</alias>
-         </aliases>
-         <description>RFC2256: state or province which this object resides in</description>
-         <superior>name</superior>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.34" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>seeAlso</alias>
-         </aliases>
-         <description>RFC2256: DN of related object</description>
-         <superior>distinguishedName</superior>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.12</syntax>
-         <equality>distinguishedNameMatch</equality>
-      </attributetype>
-      <attributetype oid="2.5.4.7" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>l</alias>
-            <alias>localityName</alias>
-         </aliases>
-         <description>RFC2256: locality which this object resides in</description>
-         <superior>name</superior>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.38" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>authorityRevocationList</alias>
-         </aliases>
-         <description>RFC2256: X.509 authority revocation list, use ;binary</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.9</syntax>
-      </attributetype>
-      <attributetype oid="2.5.4.37" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>cACertificate</alias>
-         </aliases>
-         <description>RFC2256: X.509 CA certificate, use ;binary</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.8</syntax>
-      </attributetype>
-      <attributetype oid="2.5.4.33" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>roleOccupant</alias>
-         </aliases>
-         <description>RFC2256: occupant of role</description>
-         <superior>distinguishedName</superior>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.12</syntax>
-         <equality>distinguishedNameMatch</equality>
-      </attributetype>
-      <attributetype oid="2.5.4.45" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>x500UniqueIdentifier</alias>
-         </aliases>
-         <description>RFC2256: X.500 unique identifier</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.6</syntax>
-         <equality>bitStringMatch</equality>
-      </attributetype>
-      <attributetype oid="0.9.2342.19200300.100.1.3" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>mail</alias>
-            <alias>rfc822Mailbox</alias>
-         </aliases>
-         <description>RFC1274: RFC822 Mailbox</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.26</syntax>
-         <equality>caseIgnoreIA5Match</equality>
-         <substring>caseIgnoreIA5SubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.18" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>postOfficeBox</alias>
-         </aliases>
-         <description>RFC2256: Post Office Box</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.40" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>crossCertificatePair</alias>
-         </aliases>
-         <description>RFC2256: X.509 cross certificate pair, use ;binary</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.10</syntax>
-      </attributetype>
-      <attributetype oid="2.5.4.13" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>description</alias>
-         </aliases>
-         <description>RFC2256: descriptive information</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.52" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>supportedAlgorithms</alias>
-         </aliases>
-         <description>RFC2256: supported algorithms</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.49</syntax>
-      </attributetype>
-      <attributetype oid="2.5.4.36" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>userCertificate</alias>
-         </aliases>
-         <description>RFC2256: X.509 user certificate, use ;binary</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.8</syntax>
-      </attributetype>
-      <attributetype oid="2.5.4.17" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>postalCode</alias>
-         </aliases>
-         <description>RFC2256: postal code</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="0.9.2342.19200300.100.1.1" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>uid</alias>
-            <alias>userid</alias>
-         </aliases>
-         <description>RFC1274: user identifier</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.31" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>member</alias>
-         </aliases>
-         <description>RFC2256: member of a group</description>
-         <superior>distinguishedName</superior>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.12</syntax>
-         <equality>distinguishedNameMatch</equality>
-      </attributetype>
-      <attributetype oid="2.5.4.10" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>o</alias>
-            <alias>organizationName</alias>
-         </aliases>
-         <description>RFC2256: organization this object belongs to</description>
-         <superior>name</superior>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.32" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>owner</alias>
-         </aliases>
-         <description>RFC2256: owner (of the object)</description>
-         <superior>distinguishedName</superior>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.12</syntax>
-         <equality>distinguishedNameMatch</equality>
-      </attributetype>
-      <attributetype oid="2.5.4.16" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>postalAddress</alias>
-         </aliases>
-         <description>RFC2256: postal address</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.41</syntax>
-         <equality>caseIgnoreListMatch</equality>
-         <substring>caseIgnoreListSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="0.9.2342.19200300.100.1.25" obsolete="false" singlevalue="true" collective="false" nousermodification="false">
-         <aliases>
-            <alias>dc</alias>
-            <alias>domainComponent</alias>
-         </aliases>
-         <description>RFC1274/2247: domain component</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.26</syntax>
-         <equality>caseIgnoreIA5Match</equality>
-         <substring>caseIgnoreIA5SubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.15" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>businessCategory</alias>
-         </aliases>
-         <description>RFC2256: business category</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.11" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>ou</alias>
-            <alias>organizationalUnitName</alias>
-         </aliases>
-         <description>RFC2256: organizational unit this object belongs to</description>
-         <superior>name</superior>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.14" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>searchGuide</alias>
-         </aliases>
-         <description>RFC2256: search guide, obsoleted by enhancedSearchGuide</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.25</syntax>
-      </attributetype>
-      <attributetype oid="2.5.4.39" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>certificateRevocationList</alias>
-         </aliases>
-         <description>RFC2256: X.509 certificate revocation list, use ;binary</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.9</syntax>
-      </attributetype>
-      <attributetype oid="2.5.4.6" obsolete="false" singlevalue="true" collective="false" nousermodification="false">
-         <aliases>
-            <alias>c</alias>
-            <alias>countryName</alias>
-         </aliases>
-         <description>RFC2256: ISO-3166 country 2-letter code</description>
-         <superior>name</superior>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="1.2.840.113549.1.9.1" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>email</alias>
-            <alias>emailAddress</alias>
-            <alias>pkcs9email</alias>
-         </aliases>
-         <description>RFC2459: legacy attribute for email addresses in DNs</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.26</syntax>
-         <equality>caseIgnoreIA5Match</equality>
-         <substring>caseIgnoreIA5SubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.5" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>serialNumber</alias>
-         </aliases>
-         <description>RFC2256: serial number of the entity</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.44</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.4" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>sn</alias>
-            <alias>surname</alias>
-         </aliases>
-         <description>RFC2256: last (family) name(s) for which the entity is known by</description>
-         <superior>name</superior>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.50" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>uniqueMember</alias>
-         </aliases>
-         <description>RFC2256: unique member of a group</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.34</syntax>
-         <equality>uniqueMemberMatch</equality>
-      </attributetype>
-      <attributetype oid="2.5.4.54" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>dmdName</alias>
-         </aliases>
-         <description>RFC2256: name of DMD</description>
-         <superior>name</superior>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.48" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>protocolInformation</alias>
-         </aliases>
-         <description>RFC2256: protocol information</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.42</syntax>
-         <equality>protocolInformationMatch</equality>
-      </attributetype>
-      <attributetype oid="2.5.4.19" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>physicalDeliveryOfficeName</alias>
-         </aliases>
-         <description>RFC2256: Physical Delivery Office Name</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="0.9.2342.19200300.100.1.37" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>associatedDomain</alias>
-         </aliases>
-         <description>RFC1274: domain associated with object</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.26</syntax>
-         <equality>caseIgnoreIA5Match</equality>
-         <substring>caseIgnoreIA5SubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.51" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>houseIdentifier</alias>
-         </aliases>
-         <description>RFC2256: house identifier</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.47" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>enhancedSearchGuide</alias>
-         </aliases>
-         <description>RFC2256: enhanced search guide</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.21</syntax>
-      </attributetype>
-      <attributetype oid="2.5.4.46" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>dnQualifier</alias>
-         </aliases>
-         <description>RFC2256: DN qualifier</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.44</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <ordering>caseIgnoreOrderingMatch</ordering>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.53" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>deltaRevocationList</alias>
-         </aliases>
-         <description>RFC2256: delta revocation list; use ;binary</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.9</syntax>
-      </attributetype>
-      <attributetype oid="2.5.4.43" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>initials</alias>
-         </aliases>
-         <description>RFC2256: initials of some or all of names, but not the surname(s).</description>
-         <superior>name</superior>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.21" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>telexNumber</alias>
-         </aliases>
-         <description>RFC2256: Telex Number</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.52</syntax>
-      </attributetype>
-      <attributetype oid="2.5.4.26" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>registeredAddress</alias>
-         </aliases>
-         <description>RFC2256: registered postal address</description>
-         <superior>postalAddress</superior>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.41</syntax>
-         <equality>caseIgnoreListMatch</equality>
-         <substring>caseIgnoreListSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.44" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>generationQualifier</alias>
-         </aliases>
-         <description>RFC2256: name qualifier indicating a generation</description>
-         <superior>name</superior>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.2" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>knowledgeInformation</alias>
-         </aliases>
-         <description>RFC2256: knowledge information</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-      </attributetype>
-      <attributetype oid="2.5.4.29" obsolete="false" singlevalue="true" collective="false" nousermodification="false">
-         <aliases>
-            <alias>presentationAddress</alias>
-         </aliases>
-         <description>RFC2256: presentation address</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.43</syntax>
-         <equality>presentationAddressMatch</equality>
-      </attributetype>
-      <attributetype oid="2.5.4.28" obsolete="false" singlevalue="true" collective="false" nousermodification="false">
-         <aliases>
-            <alias>preferredDeliveryMethod</alias>
-         </aliases>
-         <description>RFC2256: preferred delivery method</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.14</syntax>
-      </attributetype>
-      <attributetype oid="2.5.4.42" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>givenName</alias>
-            <alias>gn</alias>
-         </aliases>
-         <description>RFC2256: first name(s) for which the entity is known by</description>
-         <superior>name</superior>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.30" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>supportedApplicationContext</alias>
-         </aliases>
-         <description>RFC2256: supported application context</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.38</syntax>
-         <equality>objectIdentifierMatch</equality>
-      </attributetype>
-      <attributetype oid="2.5.4.22" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>teletexTerminalIdentifier</alias>
-         </aliases>
-         <description>RFC2256: Teletex Terminal Identifier</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.51</syntax>
-      </attributetype>
-      <attributetype oid="2.5.4.25" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>internationaliSDNNumber</alias>
-         </aliases>
-         <description>RFC2256: international ISDN number</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.36</syntax>
-         <equality>numericStringMatch</equality>
-         <substring>numericStringSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.24" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>x121Address</alias>
-         </aliases>
-         <description>RFC2256: X.121 Address</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.36</syntax>
-         <equality>numericStringMatch</equality>
-         <substring>numericStringSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.27" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>destinationIndicator</alias>
-         </aliases>
-         <description>RFC2256: destination indicator</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.44</syntax>
-         <equality>caseIgnoreMatch</equality>
-         <substring>caseIgnoreSubstringsMatch</substring>
-      </attributetype>
-      <attributetype oid="2.5.4.23" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>facsimileTelephoneNumber</alias>
-            <alias>fax</alias>
-         </aliases>
-         <description>RFC2256: Facsimile (Fax) Telephone Number</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.22</syntax>
-      </attributetype>
-      <attributetype oid="2.5.4.20" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
-         <aliases>
-            <alias>telephoneNumber</alias>
-         </aliases>
-         <description>RFC2256: Telephone Number</description>
-         <usage>USER_APPLICATIONS</usage>
-         <syntax>1.3.6.1.4.1.1466.115.121.1.50</syntax>
-         <equality>telephoneNumberMatch</equality>
-         <substring>telephoneNumberSubstringsMatch</substring>
-      </attributetype>
-   </attributetypes>
-   <objectclasses>
-      <objectclass oid="2.5.6.14" obsolete="false">
-         <aliases>
-            <alias>device</alias>
-         </aliases>
-         <description>RFC2256: a device</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>STRUCTURAL</type>
-         <mandatory>
-            <attributetype>cn</attributetype>
-         </mandatory>
-         <optional>
-            <attributetype>serialNumber</attributetype>
-            <attributetype>seeAlso</attributetype>
-            <attributetype>owner</attributetype>
-            <attributetype>ou</attributetype>
-            <attributetype>o</attributetype>
-            <attributetype>l</attributetype>
-            <attributetype>description</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="0.9.2342.19200300.100.4.19" obsolete="false">
-         <aliases>
-            <alias>simpleSecurityObject</alias>
-         </aliases>
-         <description>RFC1274: simple security object</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>AUXILIARY</type>
-         <mandatory>
-            <attributetype>userPassword</attributetype>
-         </mandatory>
-      </objectclass>
-      <objectclass oid="1.3.6.1.4.1.1466.344" obsolete="false">
-         <aliases>
-            <alias>dcObject</alias>
-         </aliases>
-         <description>RFC2247: domain component object</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>AUXILIARY</type>
-         <mandatory>
-            <attributetype>dc</attributetype>
-         </mandatory>
-      </objectclass>
-      <objectclass oid="1.3.6.1.4.1.250.3.15" obsolete="false">
-         <aliases>
-            <alias>labeledURIObject</alias>
-         </aliases>
-         <description>RFC2079: object that contains the URI attribute type</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>AUXILIARY</type>
-         <optional>
-            <attributetype>labeledURI</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="1.3.6.1.1.3.1" obsolete="false">
-         <aliases>
-            <alias>uidObject</alias>
-         </aliases>
-         <description>RFC2377: uid object</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>AUXILIARY</type>
-         <mandatory>
-            <attributetype>uid</attributetype>
-         </mandatory>
-      </objectclass>
-      <objectclass oid="2.5.6.20" obsolete="false">
-         <aliases>
-            <alias>dmd</alias>
-         </aliases>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>STRUCTURAL</type>
-         <mandatory>
-            <attributetype>dmdName</attributetype>
-         </mandatory>
-         <optional>
-            <attributetype>userPassword</attributetype>
-            <attributetype>searchGuide</attributetype>
-            <attributetype>seeAlso</attributetype>
-            <attributetype>businessCategory</attributetype>
-            <attributetype>x121Address</attributetype>
-            <attributetype>registeredAddress</attributetype>
-            <attributetype>destinationIndicator</attributetype>
-            <attributetype>preferredDeliveryMethod</attributetype>
-            <attributetype>telexNumber</attributetype>
-            <attributetype>teletexTerminalIdentifier</attributetype>
-            <attributetype>telephoneNumber</attributetype>
-            <attributetype>internationaliSDNNumber</attributetype>
-            <attributetype>facsimileTelephoneNumber</attributetype>
-            <attributetype>street</attributetype>
-            <attributetype>postOfficeBox</attributetype>
-            <attributetype>postalCode</attributetype>
-            <attributetype>postalAddress</attributetype>
-            <attributetype>physicalDeliveryOfficeName</attributetype>
-            <attributetype>st</attributetype>
-            <attributetype>l</attributetype>
-            <attributetype>description</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.22" obsolete="false">
-         <aliases>
-            <alias>pkiCA</alias>
-         </aliases>
-         <description>RFC2587: PKI certificate authority</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>AUXILIARY</type>
-         <optional>
-            <attributetype>authorityRevocationList</attributetype>
-            <attributetype>certificateRevocationList</attributetype>
-            <attributetype>cACertificate</attributetype>
-            <attributetype>crossCertificatePair</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.19" obsolete="false">
-         <aliases>
-            <alias>cRLDistributionPoint</alias>
-         </aliases>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>STRUCTURAL</type>
-         <mandatory>
-            <attributetype>cn</attributetype>
-         </mandatory>
-         <optional>
-            <attributetype>certificateRevocationList</attributetype>
-            <attributetype>authorityRevocationList</attributetype>
-            <attributetype>deltaRevocationList</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.23" obsolete="false">
-         <aliases>
-            <alias>deltaCRL</alias>
-         </aliases>
-         <description>RFC2587: PKI user</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>AUXILIARY</type>
-         <optional>
-            <attributetype>deltaRevocationList</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.2" obsolete="false">
-         <aliases>
-            <alias>country</alias>
-         </aliases>
-         <description>RFC2256: a country</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>STRUCTURAL</type>
-         <mandatory>
-            <attributetype>c</attributetype>
-         </mandatory>
-         <optional>
-            <attributetype>searchGuide</attributetype>
-            <attributetype>description</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.3" obsolete="false">
-         <aliases>
-            <alias>locality</alias>
-         </aliases>
-         <description>RFC2256: a locality</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>STRUCTURAL</type>
-         <optional>
-            <attributetype>street</attributetype>
-            <attributetype>seeAlso</attributetype>
-            <attributetype>searchGuide</attributetype>
-            <attributetype>st</attributetype>
-            <attributetype>l</attributetype>
-            <attributetype>description</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.8" obsolete="false">
-         <aliases>
-            <alias>organizationalRole</alias>
-         </aliases>
-         <description>RFC2256: an organizational role</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>STRUCTURAL</type>
-         <mandatory>
-            <attributetype>cn</attributetype>
-         </mandatory>
-         <optional>
-            <attributetype>x121Address</attributetype>
-            <attributetype>registeredAddress</attributetype>
-            <attributetype>destinationIndicator</attributetype>
-            <attributetype>preferredDeliveryMethod</attributetype>
-            <attributetype>telexNumber</attributetype>
-            <attributetype>teletexTerminalIdentifier</attributetype>
-            <attributetype>telephoneNumber</attributetype>
-            <attributetype>internationaliSDNNumber</attributetype>
-            <attributetype>facsimileTelephoneNumber</attributetype>
-            <attributetype>seeAlso</attributetype>
-            <attributetype>roleOccupant</attributetype>
-            <attributetype>street</attributetype>
-            <attributetype>postOfficeBox</attributetype>
-            <attributetype>postalCode</attributetype>
-            <attributetype>postalAddress</attributetype>
-            <attributetype>physicalDeliveryOfficeName</attributetype>
-            <attributetype>ou</attributetype>
-            <attributetype>st</attributetype>
-            <attributetype>l</attributetype>
-            <attributetype>description</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.7" obsolete="false">
-         <aliases>
-            <alias>organizationalPerson</alias>
-         </aliases>
-         <description>RFC2256: an organizational person</description>
-         <superiors>
-            <superior>person</superior>
-         </superiors>
-         <type>STRUCTURAL</type>
-         <optional>
-            <attributetype>title</attributetype>
-            <attributetype>x121Address</attributetype>
-            <attributetype>registeredAddress</attributetype>
-            <attributetype>destinationIndicator</attributetype>
-            <attributetype>preferredDeliveryMethod</attributetype>
-            <attributetype>telexNumber</attributetype>
-            <attributetype>teletexTerminalIdentifier</attributetype>
-            <attributetype>telephoneNumber</attributetype>
-            <attributetype>internationaliSDNNumber</attributetype>
-            <attributetype>facsimileTelephoneNumber</attributetype>
-            <attributetype>street</attributetype>
-            <attributetype>postOfficeBox</attributetype>
-            <attributetype>postalCode</attributetype>
-            <attributetype>postalAddress</attributetype>
-            <attributetype>physicalDeliveryOfficeName</attributetype>
-            <attributetype>ou</attributetype>
-            <attributetype>st</attributetype>
-            <attributetype>l</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.16" obsolete="false">
-         <aliases>
-            <alias>certificationAuthority</alias>
-         </aliases>
-         <description>RFC2256: a certificate authority</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>AUXILIARY</type>
-         <mandatory>
-            <attributetype>authorityRevocationList</attributetype>
-            <attributetype>certificateRevocationList</attributetype>
-            <attributetype>cACertificate</attributetype>
-         </mandatory>
-         <optional>
-            <attributetype>crossCertificatePair</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.4" obsolete="false">
-         <aliases>
-            <alias>organization</alias>
-         </aliases>
-         <description>RFC2256: an organization</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>STRUCTURAL</type>
-         <mandatory>
-            <attributetype>o</attributetype>
-         </mandatory>
-         <optional>
-            <attributetype>userPassword</attributetype>
-            <attributetype>searchGuide</attributetype>
-            <attributetype>seeAlso</attributetype>
-            <attributetype>businessCategory</attributetype>
-            <attributetype>x121Address</attributetype>
-            <attributetype>registeredAddress</attributetype>
-            <attributetype>destinationIndicator</attributetype>
-            <attributetype>preferredDeliveryMethod</attributetype>
-            <attributetype>telexNumber</attributetype>
-            <attributetype>teletexTerminalIdentifier</attributetype>
-            <attributetype>telephoneNumber</attributetype>
-            <attributetype>internationaliSDNNumber</attributetype>
-            <attributetype>facsimileTelephoneNumber</attributetype>
-            <attributetype>street</attributetype>
-            <attributetype>postOfficeBox</attributetype>
-            <attributetype>postalCode</attributetype>
-            <attributetype>postalAddress</attributetype>
-            <attributetype>physicalDeliveryOfficeName</attributetype>
-            <attributetype>st</attributetype>
-            <attributetype>l</attributetype>
-            <attributetype>description</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.6" obsolete="false">
-         <aliases>
-            <alias>person</alias>
-         </aliases>
-         <description>RFC2256: a person</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>STRUCTURAL</type>
-         <mandatory>
-            <attributetype>sn</attributetype>
-            <attributetype>cn</attributetype>
-         </mandatory>
-         <optional>
-            <attributetype>userPassword</attributetype>
-            <attributetype>telephoneNumber</attributetype>
-            <attributetype>seeAlso</attributetype>
-            <attributetype>description</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.15" obsolete="false">
-         <aliases>
-            <alias>strongAuthenticationUser</alias>
-         </aliases>
-         <description>RFC2256: a strong authentication user</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>AUXILIARY</type>
-         <mandatory>
-            <attributetype>userCertificate</attributetype>
-         </mandatory>
-      </objectclass>
-      <objectclass oid="2.5.6.5" obsolete="false">
-         <aliases>
-            <alias>organizationalUnit</alias>
-         </aliases>
-         <description>RFC2256: an organizational unit</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>STRUCTURAL</type>
-         <mandatory>
-            <attributetype>ou</attributetype>
-         </mandatory>
-         <optional>
-            <attributetype>userPassword</attributetype>
-            <attributetype>searchGuide</attributetype>
-            <attributetype>seeAlso</attributetype>
-            <attributetype>businessCategory</attributetype>
-            <attributetype>x121Address</attributetype>
-            <attributetype>registeredAddress</attributetype>
-            <attributetype>destinationIndicator</attributetype>
-            <attributetype>preferredDeliveryMethod</attributetype>
-            <attributetype>telexNumber</attributetype>
-            <attributetype>teletexTerminalIdentifier</attributetype>
-            <attributetype>telephoneNumber</attributetype>
-            <attributetype>internationaliSDNNumber</attributetype>
-            <attributetype>facsimileTelephoneNumber</attributetype>
-            <attributetype>street</attributetype>
-            <attributetype>postOfficeBox</attributetype>
-            <attributetype>postalCode</attributetype>
-            <attributetype>postalAddress</attributetype>
-            <attributetype>physicalDeliveryOfficeName</attributetype>
-            <attributetype>st</attributetype>
-            <attributetype>l</attributetype>
-            <attributetype>description</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.10" obsolete="false">
-         <aliases>
-            <alias>residentialPerson</alias>
-         </aliases>
-         <description>RFC2256: an residential person</description>
-         <superiors>
-            <superior>person</superior>
-         </superiors>
-         <type>STRUCTURAL</type>
-         <mandatory>
-            <attributetype>l</attributetype>
-         </mandatory>
-         <optional>
-            <attributetype>businessCategory</attributetype>
-            <attributetype>x121Address</attributetype>
-            <attributetype>registeredAddress</attributetype>
-            <attributetype>destinationIndicator</attributetype>
-            <attributetype>preferredDeliveryMethod</attributetype>
-            <attributetype>telexNumber</attributetype>
-            <attributetype>teletexTerminalIdentifier</attributetype>
-            <attributetype>telephoneNumber</attributetype>
-            <attributetype>internationaliSDNNumber</attributetype>
-            <attributetype>facsimileTelephoneNumber</attributetype>
-            <attributetype>street</attributetype>
-            <attributetype>postOfficeBox</attributetype>
-            <attributetype>postalCode</attributetype>
-            <attributetype>postalAddress</attributetype>
-            <attributetype>physicalDeliveryOfficeName</attributetype>
-            <attributetype>st</attributetype>
-            <attributetype>l</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.17" obsolete="false">
-         <aliases>
-            <alias>groupOfUniqueNames</alias>
-         </aliases>
-         <description>RFC2256: a group of unique names (DN and Unique Identifier)</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>STRUCTURAL</type>
-         <mandatory>
-            <attributetype>uniqueMember</attributetype>
-            <attributetype>cn</attributetype>
-         </mandatory>
-         <optional>
-            <attributetype>businessCategory</attributetype>
-            <attributetype>seeAlso</attributetype>
-            <attributetype>owner</attributetype>
-            <attributetype>ou</attributetype>
-            <attributetype>o</attributetype>
-            <attributetype>description</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.16.2" obsolete="false">
-         <aliases>
-            <alias>certificationAuthority-V2</alias>
-         </aliases>
-         <superiors>
-            <superior>certificationAuthority</superior>
-         </superiors>
-         <type>AUXILIARY</type>
-         <optional>
-            <attributetype>deltaRevocationList</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.9" obsolete="false">
-         <aliases>
-            <alias>groupOfNames</alias>
-         </aliases>
-         <description>RFC2256: a group of names (DNs)</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>STRUCTURAL</type>
-         <mandatory>
-            <attributetype>member</attributetype>
-            <attributetype>cn</attributetype>
-         </mandatory>
-         <optional>
-            <attributetype>businessCategory</attributetype>
-            <attributetype>seeAlso</attributetype>
-            <attributetype>owner</attributetype>
-            <attributetype>ou</attributetype>
-            <attributetype>o</attributetype>
-            <attributetype>description</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.13" obsolete="false">
-         <aliases>
-            <alias>dSA</alias>
-         </aliases>
-         <description>RFC2256: a directory system agent (a server)</description>
-         <superiors>
-            <superior>applicationEntity</superior>
-         </superiors>
-         <type>STRUCTURAL</type>
-         <optional>
-            <attributetype>knowledgeInformation</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.21" obsolete="false">
-         <aliases>
-            <alias>pkiUser</alias>
-         </aliases>
-         <description>RFC2587: a PKI user</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>AUXILIARY</type>
-         <optional>
-            <attributetype>userCertificate</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.11" obsolete="false">
-         <aliases>
-            <alias>applicationProcess</alias>
-         </aliases>
-         <description>RFC2256: an application process</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>STRUCTURAL</type>
-         <mandatory>
-            <attributetype>cn</attributetype>
-         </mandatory>
-         <optional>
-            <attributetype>seeAlso</attributetype>
-            <attributetype>ou</attributetype>
-            <attributetype>l</attributetype>
-            <attributetype>description</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.12" obsolete="false">
-         <aliases>
-            <alias>applicationEntity</alias>
-         </aliases>
-         <description>RFC2256: an application entity</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>STRUCTURAL</type>
-         <mandatory>
-            <attributetype>presentationAddress</attributetype>
-            <attributetype>cn</attributetype>
-         </mandatory>
-         <optional>
-            <attributetype>supportedApplicationContext</attributetype>
-            <attributetype>seeAlso</attributetype>
-            <attributetype>ou</attributetype>
-            <attributetype>o</attributetype>
-            <attributetype>l</attributetype>
-            <attributetype>description</attributetype>
-         </optional>
-      </objectclass>
-      <objectclass oid="2.5.6.18" obsolete="false">
-         <aliases>
-            <alias>userSecurityInformation</alias>
-         </aliases>
-         <description>RFC2256: a user security information</description>
-         <superiors>
-            <superior>top</superior>
-         </superiors>
-         <type>AUXILIARY</type>
-         <optional>
-            <attributetype>supportedAlgorithms</attributetype>
-         </optional>
-      </objectclass>
-   </objectclasses>
-</schema>
\ No newline at end of file
+  <attributetypes>
+    <attributetype oid="2.5.4.52" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>supportedAlgorithms</alias>
+      </aliases>
+      <description>RFC2256: supported algorithms</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.49</syntax>
+    </attributetype>
+    <attributetype oid="0.9.2342.19200300.100.1.25" obsolete="false" singlevalue="true" collective="false" nousermodification="false">
+      <aliases>
+        <alias>dc</alias>
+        <alias>domainComponent</alias>
+      </aliases>
+      <description>RFC1274/2247: domain component</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.26</syntax>
+      <equality>caseIgnoreIA5Match</equality>
+      <substring>caseIgnoreIA5SubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.53" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>deltaRevocationList</alias>
+      </aliases>
+      <description>RFC2256: delta revocation list; use ;binary</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.9</syntax>
+    </attributetype>
+    <attributetype oid="2.5.4.44" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>generationQualifier</alias>
+      </aliases>
+      <description>RFC2256: name qualifier indicating a generation</description>
+      <superior>name</superior>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.36" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>userCertificate</alias>
+      </aliases>
+      <description>RFC2256: X.509 user certificate, use ;binary</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.8</syntax>
+    </attributetype>
+    <attributetype oid="2.5.4.15" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>businessCategory</alias>
+      </aliases>
+      <description>RFC2256: business category</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.29" obsolete="false" singlevalue="true" collective="false" nousermodification="false">
+      <aliases>
+        <alias>presentationAddress</alias>
+      </aliases>
+      <description>RFC2256: presentation address</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.43</syntax>
+      <equality>presentationAddressMatch</equality>
+    </attributetype>
+    <attributetype oid="2.5.4.6" obsolete="false" singlevalue="true" collective="false" nousermodification="false">
+      <aliases>
+        <alias>c</alias>
+        <alias>countryName</alias>
+      </aliases>
+      <description>RFC2256: ISO-3166 country 2-letter code</description>
+      <superior>name</superior>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="0.9.2342.19200300.100.1.3" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>mail</alias>
+        <alias>rfc822Mailbox</alias>
+      </aliases>
+      <description>RFC1274: RFC822 Mailbox</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.26</syntax>
+      <equality>caseIgnoreIA5Match</equality>
+      <substring>caseIgnoreIA5SubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.50" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>uniqueMember</alias>
+      </aliases>
+      <description>RFC2256: unique member of a group</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.34</syntax>
+      <equality>uniqueMemberMatch</equality>
+    </attributetype>
+    <attributetype oid="2.5.4.5" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>serialNumber</alias>
+      </aliases>
+      <description>RFC2256: serial number of the entity</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.44</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.43" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>initials</alias>
+      </aliases>
+      <description>RFC2256: initials of some or all of names, but not the surname(s).</description>
+      <superior>name</superior>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.14" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>searchGuide</alias>
+      </aliases>
+      <description>RFC2256: search guide, obsoleted by enhancedSearchGuide</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.25</syntax>
+    </attributetype>
+    <attributetype oid="1.2.840.113549.1.9.1" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>email</alias>
+        <alias>emailAddress</alias>
+        <alias>pkcs9email</alias>
+      </aliases>
+      <description>RFC2459: legacy attribute for email addresses in DNs</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.26</syntax>
+      <equality>caseIgnoreIA5Match</equality>
+      <substring>caseIgnoreIA5SubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.37" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>cACertificate</alias>
+      </aliases>
+      <description>RFC2256: X.509 CA certificate, use ;binary</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.8</syntax>
+    </attributetype>
+    <attributetype oid="2.5.4.34" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>seeAlso</alias>
+      </aliases>
+      <description>RFC2256: DN of related object</description>
+      <superior>distinguishedName</superior>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.12</syntax>
+      <equality>distinguishedNameMatch</equality>
+    </attributetype>
+    <attributetype oid="2.5.4.42" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>givenName</alias>
+        <alias>gn</alias>
+      </aliases>
+      <description>RFC2256: first name(s) for which the entity is known by</description>
+      <superior>name</superior>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.51" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>houseIdentifier</alias>
+      </aliases>
+      <description>RFC2256: house identifier</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.13" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>description</alias>
+      </aliases>
+      <description>RFC2256: descriptive information</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.28" obsolete="false" singlevalue="true" collective="false" nousermodification="false">
+      <aliases>
+        <alias>preferredDeliveryMethod</alias>
+      </aliases>
+      <description>RFC2256: preferred delivery method</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.14</syntax>
+    </attributetype>
+    <attributetype oid="2.5.4.4" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>sn</alias>
+        <alias>surname</alias>
+      </aliases>
+      <description>RFC2256: last (family) name(s) for which the entity is known by</description>
+      <superior>name</superior>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.20" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>telephoneNumber</alias>
+      </aliases>
+      <description>RFC2256: Telephone Number</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.50</syntax>
+      <equality>telephoneNumberMatch</equality>
+      <substring>telephoneNumberSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.21" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>telexNumber</alias>
+      </aliases>
+      <description>RFC2256: Telex Number</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.52</syntax>
+    </attributetype>
+    <attributetype oid="2.5.4.27" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>destinationIndicator</alias>
+      </aliases>
+      <description>RFC2256: destination indicator</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.44</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.12" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>title</alias>
+      </aliases>
+      <description>RFC2256: title associated with the entity</description>
+      <superior>name</superior>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.47" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>enhancedSearchGuide</alias>
+      </aliases>
+      <description>RFC2256: enhanced search guide</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.21</syntax>
+    </attributetype>
+    <attributetype oid="2.5.4.32" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>owner</alias>
+      </aliases>
+      <description>RFC2256: owner (of the object)</description>
+      <superior>distinguishedName</superior>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.12</syntax>
+      <equality>distinguishedNameMatch</equality>
+    </attributetype>
+    <attributetype oid="2.5.4.40" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>crossCertificatePair</alias>
+      </aliases>
+      <description>RFC2256: X.509 cross certificate pair, use ;binary</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.10</syntax>
+    </attributetype>
+    <attributetype oid="2.5.4.22" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>teletexTerminalIdentifier</alias>
+      </aliases>
+      <description>RFC2256: Teletex Terminal Identifier</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.51</syntax>
+    </attributetype>
+    <attributetype oid="2.5.4.2" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>knowledgeInformation</alias>
+      </aliases>
+      <description>RFC2256: knowledge information</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+    </attributetype>
+    <attributetype oid="2.5.4.9" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>street</alias>
+        <alias>streetAddress</alias>
+      </aliases>
+      <description>RFC2256: street address of this object</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.26" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>registeredAddress</alias>
+      </aliases>
+      <description>RFC2256: registered postal address</description>
+      <superior>postalAddress</superior>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.41</syntax>
+      <equality>caseIgnoreListMatch</equality>
+      <substring>caseIgnoreListSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.11" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>ou</alias>
+        <alias>organizationalUnitName</alias>
+      </aliases>
+      <description>RFC2256: organizational unit this object belongs to</description>
+      <superior>name</superior>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.23" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>facsimileTelephoneNumber</alias>
+        <alias>fax</alias>
+      </aliases>
+      <description>RFC2256: Facsimile (Fax) Telephone Number</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.22</syntax>
+    </attributetype>
+    <attributetype oid="2.5.4.48" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>protocolInformation</alias>
+      </aliases>
+      <description>RFC2256: protocol information</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.42</syntax>
+      <equality>protocolInformationMatch</equality>
+    </attributetype>
+    <attributetype oid="2.5.4.25" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>internationaliSDNNumber</alias>
+      </aliases>
+      <description>RFC2256: international ISDN number</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.36</syntax>
+      <equality>numericStringMatch</equality>
+      <substring>numericStringSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.19" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>physicalDeliveryOfficeName</alias>
+      </aliases>
+      <description>RFC2256: Physical Delivery Office Name</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="0.9.2342.19200300.100.1.37" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>associatedDomain</alias>
+      </aliases>
+      <description>RFC1274: domain associated with object</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.26</syntax>
+      <equality>caseIgnoreIA5Match</equality>
+      <substring>caseIgnoreIA5SubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.54" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>dmdName</alias>
+      </aliases>
+      <description>RFC2256: name of DMD</description>
+      <superior>name</superior>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.33" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>roleOccupant</alias>
+      </aliases>
+      <description>RFC2256: occupant of role</description>
+      <superior>distinguishedName</superior>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.12</syntax>
+      <equality>distinguishedNameMatch</equality>
+    </attributetype>
+    <attributetype oid="2.5.4.10" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>o</alias>
+        <alias>organizationName</alias>
+      </aliases>
+      <description>RFC2256: organization this object belongs to</description>
+      <superior>name</superior>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.17" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>postalCode</alias>
+      </aliases>
+      <description>RFC2256: postal code</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="0.9.2342.19200300.100.1.1" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>uid</alias>
+        <alias>userid</alias>
+      </aliases>
+      <description>RFC1274: user identifier</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.31" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>member</alias>
+      </aliases>
+      <description>RFC2256: member of a group</description>
+      <superior>distinguishedName</superior>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.12</syntax>
+      <equality>distinguishedNameMatch</equality>
+    </attributetype>
+    <attributetype oid="2.5.4.24" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>x121Address</alias>
+      </aliases>
+      <description>RFC2256: X.121 Address</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.36</syntax>
+      <equality>numericStringMatch</equality>
+      <substring>numericStringSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.7" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>l</alias>
+        <alias>localityName</alias>
+      </aliases>
+      <description>RFC2256: locality which this object resides in</description>
+      <superior>name</superior>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.38" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>authorityRevocationList</alias>
+      </aliases>
+      <description>RFC2256: X.509 authority revocation list, use ;binary</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.9</syntax>
+    </attributetype>
+    <attributetype oid="2.5.4.18" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>postOfficeBox</alias>
+      </aliases>
+      <description>RFC2256: Post Office Box</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.46" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>dnQualifier</alias>
+      </aliases>
+      <description>RFC2256: DN qualifier</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.44</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <ordering>caseIgnoreOrderingMatch</ordering>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.16" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>postalAddress</alias>
+      </aliases>
+      <description>RFC2256: postal address</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.41</syntax>
+      <equality>caseIgnoreListMatch</equality>
+      <substring>caseIgnoreListSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.8" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>st</alias>
+        <alias>stateOrProvinceName</alias>
+      </aliases>
+      <description>RFC2256: state or province which this object resides in</description>
+      <superior>name</superior>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
+      <equality>caseIgnoreMatch</equality>
+      <substring>caseIgnoreSubstringsMatch</substring>
+    </attributetype>
+    <attributetype oid="2.5.4.39" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>certificateRevocationList</alias>
+      </aliases>
+      <description>RFC2256: X.509 certificate revocation list, use ;binary</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.9</syntax>
+    </attributetype>
+    <attributetype oid="2.5.4.45" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>x500UniqueIdentifier</alias>
+      </aliases>
+      <description>RFC2256: X.500 unique identifier</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.6</syntax>
+      <equality>bitStringMatch</equality>
+    </attributetype>
+    <attributetype oid="2.5.4.30" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
+      <aliases>
+        <alias>supportedApplicationContext</alias>
+      </aliases>
+      <description>RFC2256: supported application context</description>
+      <usage>USER_APPLICATIONS</usage>
+      <syntax>1.3.6.1.4.1.1466.115.121.1.38</syntax>
+      <equality>objectIdentifierMatch</equality>
+    </attributetype>
+  </attributetypes>
+  <objectclasses>
+    <objectclass oid="2.5.6.14" obsolete="false">
+      <aliases>
+        <alias>device</alias>
+      </aliases>
+      <description>RFC2256: a device</description>
+      <superiors>
+        <superior>top</superior>
+      </superiors>
+      <type>STRUCTURAL</type>
+      <mandatory>
+        <attributetype>cn</attributetype>
+      </mandatory>
+      <optional>
+        <attributetype>serialNumber</attributetype>
+        <attributetype>seeAlso</attributetype>
+        <attributetype>owner</attributetype>
+        <attributetype>ou</attributetype>
+        <attributetype>o</attributetype>
+        <attributetype>l</attributetype>
+        <attributetype>description</attributetype>
+      </optional>
+    </objectclass>
+    <objectclass oid="2.5.6.17" obsolete="false">
+      <aliases>
+        <alias>groupOfUniqueNames</alias>
+      </aliases>
+      <description>RFC2256: a group of unique names (DN and Unique Identifier)</description>
+      <superiors>
+        <superior>top</superior>
+      </superiors>
+      <type>STRUCTURAL</type>
+      <mandatory>
+        <attributetype>uniqueMember</attributetype>
+        <attributetype>cn</attributetype>
+      </mandatory>
+      <optional>
+        <attributetype>businessCategory</attributetype>
+        <attributetype>seeAlso</attributetype>
+        <attributetype>owner</attributetype>
+        <attributetype>ou</attributetype>
+        <attributetype>o</attributetype>
+        <attributetype>description</attributetype>
+      </optional>
+    </objectclass>
+    <objectclass oid="2.5.6.22" obsolete="false">
+      <aliases>
+        <alias>pkiCA</alias>
+      </aliases>
+      <description>RFC2587: PKI certificate authority</description>
+      <superiors>
+        <superior>top</superior>
+      </superiors>
+      <type>AUXILIARY</type>
+      <optional>
+        <attributetype>authorityRevocationList</attributetype>
+        <attributetype>certificateRevocationList</attributetype>
+        <attributetype>cACertificate</attributetype>
+        <attributetype>crossCertificatePair</attributetype>
+      </optional>
+    </objectclass>
+    <objectclass oid="2.5.6.21" obsolete="false">
+      <aliases>
+        <alias>pkiUser</alias>
+      </aliases>
+      <description>RFC2587: a PKI user</description>
+      <superiors>
+        <superior>top</superior>
+      </superiors>
+      <type>AUXILIARY</type>
+      <optional>
+        <attributetype>userCertificate</attributetype>
+      </optional>
+    </objectclass>
+    <objectclass oid="1.3.6.1.4.1.250.3.15" obsolete="false">
+      <aliases>
+        <alias>labeledURIObject</alias>
+      </aliases>
+      <description>RFC2079: object that contains the URI attribute type</description>
+      <superiors>
+        <superior>top</superior>
+      </superiors>
+      <type>AUXILIARY</type>
+      <optional>
+        <attributetype>labeledURI</attributetype>
+      </optional>
+    </objectclass>
+    <objectclass oid="2.5.6.7" obsolete="false">
+      <aliases>
+        <alias>organizationalPerson</alias>
+      </aliases>
+      <description>RFC2256: an organizational person</description>
+      <superiors>
+        <superior>person</superior>
+      </superiors>
+      <type>STRUCTURAL</type>
+      <optional>
+        <attributetype>title</attributetype>
+        <attributetype>x121Address</attributetype>
+        <attributetype>registeredAddress</attributetype>
+        <attributetype>destinationIndicator</attributetype>
+        <attributetype>preferredDeliveryMethod</attributetype>
+        <attributetype>telexNumber</attributetype>
+        <attributetype>teletexTerminalIdentifier</attributetype>
+        <attributetype>telephoneNumber</attributetype>
+        <attributetype>internationaliSDNNumber</attributetype>
+        <attributetype>facsimileTelephoneNumber</attributetype>
+        <attributetype>street</attributetype>
+        <attributetype>postOfficeBox</attributetype>
+        <attributetype>postalCode</attributetype>
+        <attributetype>postalAddress</attributetype>
+        <attributetype>physicalDeliveryOfficeName</attributetype>
+        <attributetype>ou</attributetype>
+        <attributetype>st</attributetype>
+        <attributetype>l</attributetype>
+      </optional>
+    </objectclass>
+    <objectclass oid="0.9.2342.19200300.100.4.19" obsolete="false">
+      <aliases>
+        <alias>simpleSecurityObject</alias>
+      </aliases>
+      <description>RFC1274: simple security object</description>
+      <superiors>
+        <superior>top</superior>
+      </superiors>
+      <type>AUXILIARY</type>
+      <mandatory>
+        <attributetype>userPassword</attributetype>
+      </mandatory>
+    </objectclass>
+    <objectclass oid="2.5.6.8" obsolete="false">
+      <aliases>
+        <alias>organizationalRole</alias>
+      </aliases>
+      <description>RFC2256: an organizational role</description>
+      <superiors>
+        <superior>top</superior>
+      </superiors>
+      <type>STRUCTURAL</type>
+      <mandatory>
+        <attributetype>cn</attributetype>
+      </mandatory>
+      <optional>
+        <attributetype>x121Address</attributetype>
+        <attributetype>registeredAddress</attributetype>
+        <attributetype>destinationIndicator</attributetype>
+        <attributetype>preferredDeliveryMethod</attributetype>
+        <attributetype>telexNumber</attributetype>
+        <attributetype>teletexTerminalIdentifier</attributetype>
+        <attributetype>telephoneNumber</attributetype>
+        <attributetype>internationaliSDNNumber</attributetype>
+        <attributetype>facsimileTelephoneNumber</attributetype>
+        <attributetype>seeAlso</attributetype>
+        <attributetype>roleOccupant</attributetype>
+        <attributetype>street</attributetype>
+        <attributetype>postOfficeBox</attributetype>
+        <attributetype>postalCode</attributetype>
+        <attributetype>postalAddress</attributetype>
+        <attributetype>physicalDeliveryOfficeName</attributetype>
+        <attributetype>ou</attributetype>
+        <attributetype>st</attributetype>
+        <attributetype>l</attributetype>
+        <attributetype>description</attributetype>
+      </optional>
+    </objectclass>
+    <objectclass oid="2.5.6.15" obsolete="false">
+      <aliases>
+        <alias>strongAuthenticationUser</alias>
+      </aliases>
+      <description>RFC2256: a strong authentication user</description>
+      <superiors>
+        <superior>top</superior>
+      </superiors>
+      <type>AUXILIARY</type>
+      <mandatory>
+        <attributetype>userCertificate</attributetype>
+      </mandatory>
+    </objectclass>
+    <objectclass oid="2.5.6.23" obsolete="false">
+      <aliases>
+        <alias>deltaCRL</alias>
+      </aliases>
+      <description>RFC2587: PKI user</description>
+      <superiors>
+        <superior>top</superior>
+      </superiors>
+      <type>AUXILIARY</type>
+      <optional>
+        <attributetype>deltaRevocationList</attributetype>
+      </optional>
+    </objectclass>
+    <objectclass oid="2.5.6.12" obsolete="false">
+      <aliases>
+        <alias>applicationEntity</alias>
+      </aliases>
+      <description>RFC2256: an application entity</description>
+      <superiors>
+        <superior>top</superior>
+      </superiors>
+      <type>STRUCTURAL</type>
+      <mandatory>
+        <attributetype>presentationAddress</attributetype>
+        <attributetype>cn</attributetype>
+      </mandatory>
+      <optional>
+        <attributetype>supportedApplicationContext</attributetype>
+        <attributetype>seeAlso</attributetype>
+        <attributetype>ou</attributetype>
+        <attributetype>o</attributetype>
+        <attributetype>l</attributetype>
+        <attributetype>description</attributetype>
+      </optional>
+    </objectclass>
+    <objectclass oid="2.5.6.6" obsolete="false">
+      <aliases>
+        <alias>person</alias>
+      </aliases>
+      <description>RFC2256: a person</description>
+      <superiors>
+        <superior>top</superior>
+      </superiors>
+      <type>STRUCTURAL</type>
+      <mandatory>
+        <attributetype>sn</attributetype>
+        <attributetype>cn</attributetype>
+      </mandatory>
+      <optional>
+        <attributetype>userPassword</attributetype>
+        <attributetype>telephoneNumber</attributetype>
+        <attributetype>seeAlso</attributetype>
+        <attributetype>description</attributetype>
+      </optional>
+    </objectclass>
+    <objectclass oid="2.5.6.11" obsolete="false">
+      <aliases>
+        <alias>applicationProcess</alias>
+      </aliases>
+      <description>RFC2256: an application process</description>
+      <superiors>
+        <superior>top</superior>
+      </superiors>
+      <type>STRUCTURAL</type>
+      <mandatory>
+        <attributetype>cn</attributetype>
+      </mandatory>
+      <optional>
+        <attributetype>seeAlso</attributetype>
+        <attributetype>ou</attributetype>
+        <attributetype>l</attributetype>
+        <attributetype>description</attributetype>
+      </optional>
+    </objectclass>
+    <objectclass oid="2.5.6.18" obsolete="false">
+      <aliases>
+        <alias>userSecurityInformation</alias>
+      </aliases>
+      <description>RFC2256: a user security information</description>
+      <superiors>
+        <superior>top</superior>
+      </superiors>
+      <type>AUXILIARY</type>
+      <optional>
+        <attributetype>supportedAlgorithms</attributetype>
+      </optional>
+    </objectclass>
+    <objectclass oid="1.3.6.1.4.1.1466.344" obsolete="false">
+      <aliases>
+        <alias>dcObject</alias>
+      </aliases>
+      <description>RFC2247: domain component object</description>
+      <superiors>
+        <superior>top</superior>
+      </superiors>
+      <type>AUXILIARY</type>
+      <mandatory>
+        <attributetype>dc</attributetype>
+      </mandatory>
+    </objectclass>
+    <objectclass oid="2.5.6.5" obsolete="false">
+      <aliases>
+        <alias>organizationalUnit</alias>
+      </aliases>
+      <description>RFC2256: an organizational unit</description>
+      <superiors>
+        <superior>top</superior>
+      </superiors>
+      <type>STRUCTURAL</type>
+      <mandatory>
+        <attributetype>ou</attributetype>
+      </mandatory>
+      <optional>
+        <attributetype>userPassword</attributetype>
+        <attributetype>searchGuide</attributetype>
+        <attributetype>seeAlso</attributetype>
+        <attributetype>businessCategory</attributetype>
+        <attributetype>x121Address</attributetype>
+        <attributetype>registeredAddress</attributetype>
+        <attributetype>destinationIndicator</attributetype>
+        <attributetype>preferredDeliveryMethod</attributetype>
+        <attributetype>telexNumber</attributetype>
+        <attributetype>teletexTerminalIdentifier</attributetype>
+        <attributetype>telephoneNumber</attributetype>
+        <attributetype>internationaliSDNNumber</attributetype>
+        <attributetype>facsimileTelephoneNumber</attributetype>
+        <attributetype>street</attributetype>
+        <attributetype>postOfficeBox</attributetype>
+        <attributetype>postalCode</attributetype>
+        <attributetype>postalAddress</attributetype>
+        <attributetype>physicalDeliveryOfficeName</attributetype>
+        <attributetype>st</attributetype>
+        <attributetype>l</attributetype>
+        <attributetype>description</attributetype>
+      </optional>
+    </objectclass>
+    <objectclass oid="2.5.6.13" obsolete="false">
+      <aliases>
+        <alias>dSA</alias>
+      </aliases>
+      <description>RFC2256: a directory system agent (a server)</description>
+      <superiors>
+        <superior>applicationEntity</superior>
+      </superiors>
+      <type>STRUCTURAL</type>
+      <optional>
+        <attributetype>knowledgeInformation</attributetype>
+      </optional>
+    </objectclass>
+    <objectclass oid="2.5.6.20" obsolete="false">
+      <aliases>
+        <alias>dmd</alias>
+      </aliases>
+      <superiors>
+        <superior>top</superior>
+      </superiors>
+      <type>STRUCTURAL</type>
+      <mandatory>
+        <attributetype>dmdName</attributetype>
+      </mandatory>
+      <optional>
+        <attributetype>userPassword</attributetype>
+        <attributetype>searchGuide</attributetype>
+        <attributetype>seeAlso</attributetype>
+        <attributetype>businessCategory</attributetype>
+        <attributetype>x121Address</attributetype>
+        <attributetype>registeredAddress</attributetype>
+        <attributetype>destinationIndicator</attributetype>
+        <attributetype>preferredDeliveryMethod</attributetype>
+        <attributetype>telexNumber</attributetype>
+        <attributetype>teletexTerminalIdentifier</attributetype>
+        <attributetype>telephoneNumber</attributetype>
+        <attributetype>internationaliSDNNumber</attributetype>
+        <attributetype>facsimileTelephoneNumber</attributetype>
+        <attributetype>street</attributetype>
+        <attributetype>postOfficeBox</attributetype>
+        <attributetype>postalCode</attributetype>
+        <attributetype>postalAddress</attributetype>
+        <attributetype>physicalDeliveryOfficeName</attributetype>
+        <attributetype>st</attributetype>
+        <attributetype>l</attributetype>
+        <attributetype>description</attributetype>
+      </optional>
+    </objectclass>
+    <objectclass oid="1.3.6.1.1.3.1" obsolete="false">
+      <aliases>
+        <alias>uidObject</alias>
+      </aliases>
+      <description>RFC2377: uid object</description>
+      <superiors>
+        <superior>top</superior>
+      </superiors>
+      <type>AUXILIARY</type>
+      <mandatory>
+        <attributetype>uid</attributetype>
+      </mandatory>
+    </objectclass>
+    <objectclass oid="2.5.6.19" obsolete="false">
+      <aliases>
+        <alias>cRLDistributionPoint</alias>
+      </aliases>
+      <superiors>
+        <superior>top</superior>
+      </superiors>
+      <type>STRUCTURAL</type>
+      <mandatory>
+        <attributetype>cn</attributetype>
+      </mandatory>
+      <optional>
+        <attributetype>certificateRevocationList</attributetype>
+        <attributetype>authorityRevocationList</attributetype>
+        <attributetype>deltaRevocationList</attributetype>
+      </optional>
+    </objectclass>
+    <objectclass oid="2.5.6.10" obsolete="false">
+      <aliases>
+        <alias>residentialPerson</alias>
+      </aliases>
+      <description>RFC2256: an residential person</description>
+      <superiors>
+        <superior>person</superior>
+      </superiors>
+      <type>STRUCTURAL</type>

[... 148 lines stripped ...]