Forum Discussion
Simon_Blakely
May 29, 2018Employee
I think what is happening is:
The way you created your datagroup has created a datagroup element with a name of "CN" and a value of "3456.xxxx.yyyy.zzz".
Your extraction from the certificate is CN=1234.xxxx.yyyy.zzz
So the contains match is for "CN", and will always match. You can create your datagroup without the CN= element at all, or specify the -value specifier to match on the values.