[1] RFC 5280 - Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile ( 版) http://tools.ietf.org/html/rfc5280#section-4.1.2.5.1
[2] RFC 4517 - Lightweight Directory Access Protocol (LDAP): Syntaxes and Matching Rules ( 版) http://tools.ietf.org/html/rfc4517#section-3.3.34
[9] rfc3852, https://datatracker.ietf.org/doc/html/rfc3852#section-11.3