The quest has been brought down to this: > On 03/10/2001, Pepijn Vissers <vissers@fox-it.com> > wrote To 'philipp@buehler.de': > > Question remains: how to put a whole DN into the conditions > > and not just a ufqdn or a name. > > <StrEx> "~=" <RegExpr> ; > > Now the question is, what's the StrEx for the X.509-Path :P Has anyone got an idea? Soooooooooooo close... Regards, P. Vissers