<?xml version="1.0" encoding="UTF-8"?>
<!--
  Licensed to the Apache Software Foundation (ASF) under one
  or more contributor license agreements.  See the NOTICE file
  distributed with this work for additional information
  regarding copyright ownership.  The ASF licenses this file
  to you under the Apache License, Version 2.0 (the
  "License"); you may not use this file except in compliance
  with the License.  You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

  Unless required by applicable law or agreed to in writing,
  software distributed under the License is distributed on an
  "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
  KIND, either express or implied.  See the License for the
  specific language governing permissions and limitations
  under the License.
-->
<schema name="core">
   <attributetypes>
      <attributetype oid="2.5.4.2" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>knowledgeInformation</alias>
         </aliases>
         <description>RFC2256: knowledge information</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
         <syntaxlength>32768</syntaxlength>
         <equality>caseIgnoreMatch</equality>
      </attributetype>
      <attributetype oid="2.5.4.4" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>sn</alias>
            <alias>surname</alias>
         </aliases>
         <description>RFC2256: last (family) name(s) for which the entity is known by</description>
         <superior>name</superior>
         <usage>USER_APPLICATIONS</usage>
      </attributetype>
      <attributetype oid="2.5.4.5" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>serialNumber</alias>
         </aliases>
         <description>RFC2256: serial number of the entity</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.44</syntax>
         <syntaxlength>64</syntaxlength>
         <equality>caseIgnoreMatch</equality>
         <substring>caseIgnoreSubstringsMatch</substring>
      </attributetype>
      <attributetype oid="2.5.4.6" obsolete="false" singlevalue="true" collective="false" nousermodification="false">
         <aliases>
            <alias>c</alias>
            <alias>countryName</alias>
         </aliases>
         <description>RFC4519: two-letter ISO-3166 country code</description>
         <superior>name</superior>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.11</syntax>
      </attributetype>
      <attributetype oid="2.5.4.7" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>l</alias>
            <alias>localityName</alias>
         </aliases>
         <description>RFC2256: locality which this object resides in</description>
         <superior>name</superior>
         <usage>USER_APPLICATIONS</usage>
      </attributetype>
      <attributetype oid="2.5.4.8" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>st</alias>
            <alias>stateOrProvinceName</alias>
         </aliases>
         <description>RFC2256: state or province which this object resides in</description>
         <superior>name</superior>
         <usage>USER_APPLICATIONS</usage>
      </attributetype>
      <attributetype oid="2.5.4.9" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>street</alias>
            <alias>streetAddress</alias>
         </aliases>
         <description>RFC2256: street address of this object</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
         <syntaxlength>128</syntaxlength>
         <equality>caseIgnoreMatch</equality>
         <substring>caseIgnoreSubstringsMatch</substring>
      </attributetype>
      <attributetype oid="2.5.4.10" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>o</alias>
            <alias>organizationName</alias>
         </aliases>
         <description>RFC2256: organization this object belongs to</description>
         <superior>name</superior>
         <usage>USER_APPLICATIONS</usage>
      </attributetype>
      <attributetype oid="2.5.4.11" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>ou</alias>
            <alias>organizationalUnitName</alias>
         </aliases>
         <description>RFC2256: organizational unit this object belongs to</description>
         <superior>name</superior>
         <usage>USER_APPLICATIONS</usage>
      </attributetype>
      <attributetype oid="2.5.4.12" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>title</alias>
         </aliases>
         <description>RFC2256: title associated with the entity</description>
         <superior>name</superior>
         <usage>USER_APPLICATIONS</usage>
      </attributetype>
      <attributetype oid="2.5.4.14" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>searchGuide</alias>
         </aliases>
         <description>RFC2256: search guide, deprecated by enhancedSearchGuide</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.25</syntax>
      </attributetype>
      <attributetype oid="2.5.4.15" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>businessCategory</alias>
         </aliases>
         <description>RFC2256: business category</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
         <syntaxlength>128</syntaxlength>
         <equality>caseIgnoreMatch</equality>
         <substring>caseIgnoreSubstringsMatch</substring>
      </attributetype>
      <attributetype oid="2.5.4.16" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>postalAddress</alias>
         </aliases>
         <description>RFC2256: postal address</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.41</syntax>
         <equality>caseIgnoreListMatch</equality>
         <substring>caseIgnoreListSubstringsMatch</substring>
      </attributetype>
      <attributetype oid="2.5.4.17" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>postalCode</alias>
         </aliases>
         <description>RFC2256: postal code</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
         <syntaxlength>40</syntaxlength>
         <equality>caseIgnoreMatch</equality>
         <substring>caseIgnoreSubstringsMatch</substring>
      </attributetype>
      <attributetype oid="2.5.4.18" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>postOfficeBox</alias>
         </aliases>
         <description>RFC2256: Post Office Box</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
         <syntaxlength>40</syntaxlength>
         <equality>caseIgnoreMatch</equality>
         <substring>caseIgnoreSubstringsMatch</substring>
      </attributetype>
      <attributetype oid="2.5.4.19" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>physicalDeliveryOfficeName</alias>
         </aliases>
         <description>RFC2256: Physical Delivery Office Name</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
         <syntaxlength>128</syntaxlength>
         <equality>caseIgnoreMatch</equality>
         <substring>caseIgnoreSubstringsMatch</substring>
      </attributetype>
      <attributetype oid="2.5.4.20" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>telephoneNumber</alias>
         </aliases>
         <description>RFC2256: Telephone Number</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.50</syntax>
         <syntaxlength>32</syntaxlength>
         <equality>telephoneNumberMatch</equality>
         <substring>telephoneNumberSubstringsMatch</substring>
      </attributetype>
      <attributetype oid="2.5.4.21" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>telexNumber</alias>
         </aliases>
         <description>RFC2256: Telex Number</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.52</syntax>
      </attributetype>
      <attributetype oid="2.5.4.22" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>teletexTerminalIdentifier</alias>
         </aliases>
         <description>RFC2256: Teletex Terminal Identifier</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.51</syntax>
      </attributetype>
      <attributetype oid="2.5.4.23" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>facsimileTelephoneNumber</alias>
            <alias>fax</alias>
         </aliases>
         <description>RFC2256: Facsimile (Fax) Telephone Number</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.22</syntax>
      </attributetype>
      <attributetype oid="2.5.4.24" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>x121Address</alias>
         </aliases>
         <description>RFC2256: X.121 Address</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.36</syntax>
         <syntaxlength>15</syntaxlength>
         <equality>numericStringMatch</equality>
         <substring>numericStringSubstringsMatch</substring>
      </attributetype>
      <attributetype oid="2.5.4.25" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>internationaliSDNNumber</alias>
         </aliases>
         <description>RFC2256: international ISDN number</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.36</syntax>
         <syntaxlength>16</syntaxlength>
         <equality>numericStringMatch</equality>
         <substring>numericStringSubstringsMatch</substring>
      </attributetype>
      <attributetype oid="2.5.4.26" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>registeredAddress</alias>
         </aliases>
         <description>RFC2256: registered postal address</description>
         <superior>postalAddress</superior>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.41</syntax>
      </attributetype>
      <attributetype oid="2.5.4.27" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>destinationIndicator</alias>
         </aliases>
         <description>RFC2256: destination indicator</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.44</syntax>
         <syntaxlength>128</syntaxlength>
         <equality>caseIgnoreMatch</equality>
         <substring>caseIgnoreSubstringsMatch</substring>
      </attributetype>
      <attributetype oid="2.5.4.28" obsolete="false" singlevalue="true" collective="false" nousermodification="false">
         <aliases>
            <alias>preferredDeliveryMethod</alias>
         </aliases>
         <description>RFC2256: preferred delivery method</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.14</syntax>
      </attributetype>
      <attributetype oid="2.5.4.29" obsolete="false" singlevalue="true" collective="false" nousermodification="false">
         <aliases>
            <alias>presentationAddress</alias>
         </aliases>
         <description>RFC2256: presentation address</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.43</syntax>
         <equality>presentationAddressMatch</equality>
      </attributetype>
      <attributetype oid="2.5.4.30" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>supportedApplicationContext</alias>
         </aliases>
         <description>RFC2256: supported application context</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.38</syntax>
         <equality>objectIdentifierMatch</equality>
      </attributetype>
      <attributetype oid="2.5.4.31" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>member</alias>
         </aliases>
         <description>RFC2256: member of a group</description>
         <superior>distinguishedName</superior>
         <usage>USER_APPLICATIONS</usage>
      </attributetype>
      <attributetype oid="2.5.4.32" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>owner</alias>
         </aliases>
         <description>RFC2256: owner (of the object)</description>
         <superior>distinguishedName</superior>
         <usage>USER_APPLICATIONS</usage>
      </attributetype>
      <attributetype oid="2.5.4.33" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>roleOccupant</alias>
         </aliases>
         <description>RFC2256: occupant of role</description>
         <superior>distinguishedName</superior>
         <usage>USER_APPLICATIONS</usage>
      </attributetype>
      <attributetype oid="2.5.4.36" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>userCertificate</alias>
         </aliases>
         <description>RFC2256: X.509 user certificate, use ;binary</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.8</syntax>
         <equality>certificateExactMatch</equality>
      </attributetype>
      <attributetype oid="2.5.4.37" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>cACertificate</alias>
         </aliases>
         <description>RFC2256: X.509 CA certificate, use ;binary</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.8</syntax>
         <equality>certificateExactMatch</equality>
      </attributetype>
      <attributetype oid="2.5.4.38" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>authorityRevocationList</alias>
         </aliases>
         <description>RFC2256: X.509 authority revocation list, use ;binary</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.9</syntax>
      </attributetype>
      <attributetype oid="2.5.4.39" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>certificateRevocationList</alias>
         </aliases>
         <description>RFC2256: X.509 certificate revocation list, use ;binary</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.9</syntax>
      </attributetype>
      <attributetype oid="2.5.4.40" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>crossCertificatePair</alias>
         </aliases>
         <description>RFC2256: X.509 cross certificate pair, use ;binary</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.10</syntax>
      </attributetype>
      <attributetype oid="2.5.4.42" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>givenName</alias>
            <alias>gn</alias>
         </aliases>
         <description>RFC2256: first name(s) for which the entity is known by</description>
         <superior>name</superior>
         <usage>USER_APPLICATIONS</usage>
      </attributetype>
      <attributetype oid="2.5.4.43" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>initials</alias>
         </aliases>
         <description>RFC2256: initials of some or all of names, but not the surname(s).</description>
         <superior>name</superior>
         <usage>USER_APPLICATIONS</usage>
      </attributetype>
      <attributetype oid="2.5.4.44" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>generationQualifier</alias>
         </aliases>
         <description>RFC2256: name qualifier indicating a generation</description>
         <superior>name</superior>
         <usage>USER_APPLICATIONS</usage>
      </attributetype>
      <attributetype oid="2.5.4.45" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>x500UniqueIdentifier</alias>
         </aliases>
         <description>RFC2256: X.500 unique identifier</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.6</syntax>
         <equality>bitStringMatch</equality>
      </attributetype>
      <attributetype oid="2.5.4.46" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>dnQualifier</alias>
         </aliases>
         <description>RFC2256: DN qualifier</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.44</syntax>
         <equality>caseIgnoreMatch</equality>
         <ordering>caseIgnoreOrderingMatch</ordering>
         <substring>caseIgnoreSubstringsMatch</substring>
      </attributetype>
      <attributetype oid="2.5.4.47" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>enhancedSearchGuide</alias>
         </aliases>
         <description>RFC2256: enhanced search guide</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.21</syntax>
      </attributetype>
      <attributetype oid="2.5.4.48" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>protocolInformation</alias>
         </aliases>
         <description>RFC2256: protocol information</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.42</syntax>
         <equality>protocolInformationMatch</equality>
      </attributetype>
      <attributetype oid="2.5.4.50" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>uniqueMember</alias>
         </aliases>
         <description>RFC2256: unique member of a group</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.34</syntax>
         <equality>uniqueMemberMatch</equality>
      </attributetype>
      <attributetype oid="2.5.4.51" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>houseIdentifier</alias>
         </aliases>
         <description>RFC2256: house identifier</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.15</syntax>
         <syntaxlength>32768</syntaxlength>
         <equality>caseIgnoreMatch</equality>
         <substring>caseIgnoreSubstringsMatch</substring>
      </attributetype>
      <attributetype oid="2.5.4.52" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>supportedAlgorithms</alias>
         </aliases>
         <description>RFC2256: supported algorithms</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.49</syntax>
      </attributetype>
      <attributetype oid="2.5.4.53" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>deltaRevocationList</alias>
         </aliases>
         <description>RFC2256: delta revocation list; use ;binary</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.9</syntax>
      </attributetype>
      <attributetype oid="2.5.4.54" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>dmdName</alias>
         </aliases>
         <description>RFC2256: name of DMD</description>
         <superior>name</superior>
         <usage>USER_APPLICATIONS</usage>
      </attributetype>
      <attributetype oid="2.5.4.65" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>pseudonym</alias>
         </aliases>
         <description>X.520(4th): pseudonym for the object</description>
         <superior>name</superior>
         <usage>USER_APPLICATIONS</usage>
      </attributetype>
      <attributetype oid="0.9.2342.19200300.100.1.3" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>mail</alias>
            <alias>rfc822Mailbox</alias>
         </aliases>
         <description>RFC1274: RFC822 Mailbox</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.26</syntax>
         <syntaxlength>256</syntaxlength>
         <equality>caseIgnoreIA5Match</equality>
         <substring>caseIgnoreIA5SubstringsMatch</substring>
      </attributetype>
      <attributetype oid="0.9.2342.19200300.100.1.25" obsolete="false" singlevalue="true" collective="false" nousermodification="false">
         <aliases>
            <alias>dc</alias>
            <alias>domainComponent</alias>
         </aliases>
         <description>RFC1274/2247: domain component</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.26</syntax>
         <equality>caseIgnoreIA5Match</equality>
         <substring>caseIgnoreIA5SubstringsMatch</substring>
      </attributetype>
      <attributetype oid="0.9.2342.19200300.100.1.37" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>associatedDomain</alias>
         </aliases>
         <description>RFC1274: domain associated with object</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.26</syntax>
         <equality>caseIgnoreIA5Match</equality>
         <substring>caseIgnoreIA5SubstringsMatch</substring>
      </attributetype>
      <attributetype oid="1.2.840.113549.1.9.1" obsolete="false" singlevalue="false" collective="false" nousermodification="false">
         <aliases>
            <alias>email</alias>
            <alias>emailAddress</alias>
            <alias>pkcs9email</alias>
         </aliases>
         <description>RFC3280: legacy attribute for email addresses in DNs</description>
         <usage>USER_APPLICATIONS</usage>
         <syntax>1.3.6.1.4.1.1466.115.121.1.26</syntax>
         <syntaxlength>128</syntaxlength>
         <equality>caseIgnoreIA5Match</equality>
         <substring>caseIgnoreIA5SubstringsMatch</substring>
      </attributetype>
   </attributetypes>
   <objectclasses>
      <objectclass oid="2.5.6.2" obsolete="false">
         <aliases>
            <alias>country</alias>
         </aliases>
         <description>RFC2256: a country</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>STRUCTURAL</type>
         <mandatory>
            <attributetype>c</attributetype>
         </mandatory>
         <optional>
            <attributetype>searchGuide</attributetype>
            <attributetype>description</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.3" obsolete="false">
         <aliases>
            <alias>locality</alias>
         </aliases>
         <description>RFC2256: a locality</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>STRUCTURAL</type>
         <optional>
            <attributetype>street</attributetype>
            <attributetype>seeAlso</attributetype>
            <attributetype>searchGuide</attributetype>
            <attributetype>st</attributetype>
            <attributetype>l</attributetype>
            <attributetype>description</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.4" obsolete="false">
         <aliases>
            <alias>organization</alias>
         </aliases>
         <description>RFC2256: an organization</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>STRUCTURAL</type>
         <mandatory>
            <attributetype>o</attributetype>
         </mandatory>
         <optional>
            <attributetype>userPassword</attributetype>
            <attributetype>searchGuide</attributetype>
            <attributetype>seeAlso</attributetype>
            <attributetype>businessCategory</attributetype>
            <attributetype>x121Address</attributetype>
            <attributetype>registeredAddress</attributetype>
            <attributetype>destinationIndicator</attributetype>
            <attributetype>preferredDeliveryMethod</attributetype>
            <attributetype>telexNumber</attributetype>
            <attributetype>teletexTerminalIdentifier</attributetype>
            <attributetype>telephoneNumber</attributetype>
            <attributetype>internationaliSDNNumber</attributetype>
            <attributetype>facsimileTelephoneNumber</attributetype>
            <attributetype>street</attributetype>
            <attributetype>postOfficeBox</attributetype>
            <attributetype>postalCode</attributetype>
            <attributetype>postalAddress</attributetype>
            <attributetype>physicalDeliveryOfficeName</attributetype>
            <attributetype>st</attributetype>
            <attributetype>l</attributetype>
            <attributetype>description</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.5" obsolete="false">
         <aliases>
            <alias>organizationalUnit</alias>
         </aliases>
         <description>RFC2256: an organizational unit</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>STRUCTURAL</type>
         <mandatory>
            <attributetype>ou</attributetype>
         </mandatory>
         <optional>
            <attributetype>userPassword</attributetype>
            <attributetype>searchGuide</attributetype>
            <attributetype>seeAlso</attributetype>
            <attributetype>businessCategory</attributetype>
            <attributetype>x121Address</attributetype>
            <attributetype>registeredAddress</attributetype>
            <attributetype>destinationIndicator</attributetype>
            <attributetype>preferredDeliveryMethod</attributetype>
            <attributetype>telexNumber</attributetype>
            <attributetype>teletexTerminalIdentifier</attributetype>
            <attributetype>telephoneNumber</attributetype>
            <attributetype>internationaliSDNNumber</attributetype>
            <attributetype>facsimileTelephoneNumber</attributetype>
            <attributetype>street</attributetype>
            <attributetype>postOfficeBox</attributetype>
            <attributetype>postalCode</attributetype>
            <attributetype>postalAddress</attributetype>
            <attributetype>physicalDeliveryOfficeName</attributetype>
            <attributetype>st</attributetype>
            <attributetype>l</attributetype>
            <attributetype>description</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.6" obsolete="false">
         <aliases>
            <alias>person</alias>
         </aliases>
         <description>RFC2256: a person</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>STRUCTURAL</type>
         <mandatory>
            <attributetype>sn</attributetype>
            <attributetype>cn</attributetype>
         </mandatory>
         <optional>
            <attributetype>userPassword</attributetype>
            <attributetype>telephoneNumber</attributetype>
            <attributetype>seeAlso</attributetype>
            <attributetype>description</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.7" obsolete="false">
         <aliases>
            <alias>organizationalPerson</alias>
         </aliases>
         <description>RFC2256: an organizational person</description>
         <superiors>
            <superior>person</superior>
         </superiors>
         <type>STRUCTURAL</type>
         <optional>
            <attributetype>title</attributetype>
            <attributetype>x121Address</attributetype>
            <attributetype>registeredAddress</attributetype>
            <attributetype>destinationIndicator</attributetype>
            <attributetype>preferredDeliveryMethod</attributetype>
            <attributetype>telexNumber</attributetype>
            <attributetype>teletexTerminalIdentifier</attributetype>
            <attributetype>telephoneNumber</attributetype>
            <attributetype>internationaliSDNNumber</attributetype>
            <attributetype>facsimileTelephoneNumber</attributetype>
            <attributetype>street</attributetype>
            <attributetype>postOfficeBox</attributetype>
            <attributetype>postalCode</attributetype>
            <attributetype>postalAddress</attributetype>
            <attributetype>physicalDeliveryOfficeName</attributetype>
            <attributetype>ou</attributetype>
            <attributetype>st</attributetype>
            <attributetype>l</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.8" obsolete="false">
         <aliases>
            <alias>organizationalRole</alias>
         </aliases>
         <description>RFC2256: an organizational role</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>STRUCTURAL</type>
         <mandatory>
            <attributetype>cn</attributetype>
         </mandatory>
         <optional>
            <attributetype>x121Address</attributetype>
            <attributetype>registeredAddress</attributetype>
            <attributetype>destinationIndicator</attributetype>
            <attributetype>preferredDeliveryMethod</attributetype>
            <attributetype>telexNumber</attributetype>
            <attributetype>teletexTerminalIdentifier</attributetype>
            <attributetype>telephoneNumber</attributetype>
            <attributetype>internationaliSDNNumber</attributetype>
            <attributetype>facsimileTelephoneNumber</attributetype>
            <attributetype>seeAlso</attributetype>
            <attributetype>roleOccupant</attributetype>
            <attributetype>preferredDeliveryMethod</attributetype>
            <attributetype>street</attributetype>
            <attributetype>postOfficeBox</attributetype>
            <attributetype>postalCode</attributetype>
            <attributetype>postalAddress</attributetype>
            <attributetype>physicalDeliveryOfficeName</attributetype>
            <attributetype>ou</attributetype>
            <attributetype>st</attributetype>
            <attributetype>l</attributetype>
            <attributetype>description</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.9" obsolete="false">
         <aliases>
            <alias>groupOfNames</alias>
         </aliases>
         <description>RFC2256: a group of names (DNs)</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>STRUCTURAL</type>
         <mandatory>
            <attributetype>member</attributetype>
            <attributetype>cn</attributetype>
         </mandatory>
         <optional>
            <attributetype>businessCategory</attributetype>
            <attributetype>seeAlso</attributetype>
            <attributetype>owner</attributetype>
            <attributetype>ou</attributetype>
            <attributetype>o</attributetype>
            <attributetype>description</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.10" obsolete="false">
         <aliases>
            <alias>residentialPerson</alias>
         </aliases>
         <description>RFC2256: an residential person</description>
         <superiors>
            <superior>person</superior>
         </superiors>
         <type>STRUCTURAL</type>
         <mandatory>
            <attributetype>l</attributetype>
         </mandatory>
         <optional>
            <attributetype>businessCategory</attributetype>
            <attributetype>x121Address</attributetype>
            <attributetype>registeredAddress</attributetype>
            <attributetype>destinationIndicator</attributetype>
            <attributetype>preferredDeliveryMethod</attributetype>
            <attributetype>telexNumber</attributetype>
            <attributetype>teletexTerminalIdentifier</attributetype>
            <attributetype>telephoneNumber</attributetype>
            <attributetype>internationaliSDNNumber</attributetype>
            <attributetype>facsimileTelephoneNumber</attributetype>
            <attributetype>preferredDeliveryMethod</attributetype>
            <attributetype>street</attributetype>
            <attributetype>postOfficeBox</attributetype>
            <attributetype>postalCode</attributetype>
            <attributetype>postalAddress</attributetype>
            <attributetype>physicalDeliveryOfficeName</attributetype>
            <attributetype>st</attributetype>
            <attributetype>l</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.11" obsolete="false">
         <aliases>
            <alias>applicationProcess</alias>
         </aliases>
         <description>RFC2256: an application process</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>STRUCTURAL</type>
         <mandatory>
            <attributetype>cn</attributetype>
         </mandatory>
         <optional>
            <attributetype>seeAlso</attributetype>
            <attributetype>ou</attributetype>
            <attributetype>l</attributetype>
            <attributetype>description</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.12" obsolete="false">
         <aliases>
            <alias>applicationEntity</alias>
         </aliases>
         <description>RFC2256: an application entity</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>STRUCTURAL</type>
         <mandatory>
            <attributetype>presentationAddress</attributetype>
            <attributetype>cn</attributetype>
         </mandatory>
         <optional>
            <attributetype>supportedApplicationContext</attributetype>
            <attributetype>seeAlso</attributetype>
            <attributetype>ou</attributetype>
            <attributetype>o</attributetype>
            <attributetype>l</attributetype>
            <attributetype>description</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.13" obsolete="false">
         <aliases>
            <alias>dSA</alias>
         </aliases>
         <description>RFC2256: a directory system agent (a server)</description>
         <superiors>
            <superior>applicationEntity</superior>
         </superiors>
         <type>STRUCTURAL</type>
         <optional>
            <attributetype>knowledgeInformation</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.14" obsolete="false">
         <aliases>
            <alias>device</alias>
         </aliases>
         <description>RFC2256: a device</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>STRUCTURAL</type>
         <mandatory>
            <attributetype>cn</attributetype>
         </mandatory>
         <optional>
            <attributetype>serialNumber</attributetype>
            <attributetype>seeAlso</attributetype>
            <attributetype>owner</attributetype>
            <attributetype>ou</attributetype>
            <attributetype>o</attributetype>
            <attributetype>l</attributetype>
            <attributetype>description</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.15" obsolete="false">
         <aliases>
            <alias>strongAuthenticationUser</alias>
         </aliases>
         <description>RFC2256: a strong authentication user</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>AUXILIARY</type>
         <mandatory>
            <attributetype>userCertificate</attributetype>
         </mandatory>
      </objectclass>
      <objectclass oid="2.5.6.16" obsolete="false">
         <aliases>
            <alias>certificationAuthority</alias>
         </aliases>
         <description>RFC2256: a certificate authority</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>AUXILIARY</type>
         <mandatory>
            <attributetype>authorityRevocationList</attributetype>
            <attributetype>certificateRevocationList</attributetype>
            <attributetype>cACertificate</attributetype>
         </mandatory>
         <optional>
            <attributetype>crossCertificatePair</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.17" obsolete="false">
         <aliases>
            <alias>groupOfUniqueNames</alias>
         </aliases>
         <description>RFC2256: a group of unique names (DN and Unique Identifier)</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>STRUCTURAL</type>
         <mandatory>
            <attributetype>uniqueMember</attributetype>
            <attributetype>cn</attributetype>
         </mandatory>
         <optional>
            <attributetype>businessCategory</attributetype>
            <attributetype>seeAlso</attributetype>
            <attributetype>owner</attributetype>
            <attributetype>ou</attributetype>
            <attributetype>o</attributetype>
            <attributetype>description</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.18" obsolete="false">
         <aliases>
            <alias>userSecurityInformation</alias>
         </aliases>
         <description>RFC2256: a user security information</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>AUXILIARY</type>
         <optional>
            <attributetype>supportedAlgorithms</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.16.2" obsolete="false">
         <aliases>
            <alias>certificationAuthority-V2</alias>
         </aliases>
         <superiors>
            <superior>certificationAuthority</superior>
         </superiors>
         <type>AUXILIARY</type>
         <optional>
            <attributetype>deltaRevocationList</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.19" obsolete="false">
         <aliases>
            <alias>cRLDistributionPoint</alias>
         </aliases>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>STRUCTURAL</type>
         <mandatory>
            <attributetype>cn</attributetype>
         </mandatory>
         <optional>
            <attributetype>certificateRevocationList</attributetype>
            <attributetype>authorityRevocationList</attributetype>
            <attributetype>deltaRevocationList</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.20" obsolete="false">
         <aliases>
            <alias>dmd</alias>
         </aliases>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>STRUCTURAL</type>
         <mandatory>
            <attributetype>dmdName</attributetype>
         </mandatory>
         <optional>
            <attributetype>userPassword</attributetype>
            <attributetype>searchGuide</attributetype>
            <attributetype>seeAlso</attributetype>
            <attributetype>businessCategory</attributetype>
            <attributetype>x121Address</attributetype>
            <attributetype>registeredAddress</attributetype>
            <attributetype>destinationIndicator</attributetype>
            <attributetype>preferredDeliveryMethod</attributetype>
            <attributetype>telexNumber</attributetype>
            <attributetype>teletexTerminalIdentifier</attributetype>
            <attributetype>telephoneNumber</attributetype>
            <attributetype>internationaliSDNNumber</attributetype>
            <attributetype>facsimileTelephoneNumber</attributetype>
            <attributetype>street</attributetype>
            <attributetype>postOfficeBox</attributetype>
            <attributetype>postalCode</attributetype>
            <attributetype>postalAddress</attributetype>
            <attributetype>physicalDeliveryOfficeName</attributetype>
            <attributetype>st</attributetype>
            <attributetype>l</attributetype>
            <attributetype>description</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.21" obsolete="false">
         <aliases>
            <alias>pkiUser</alias>
         </aliases>
         <description>RFC2587: a PKI user</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>AUXILIARY</type>
         <optional>
            <attributetype>userCertificate</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.22" obsolete="false">
         <aliases>
            <alias>pkiCA</alias>
         </aliases>
         <description>RFC2587: PKI certificate authority</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>AUXILIARY</type>
         <optional>
            <attributetype>authorityRevocationList</attributetype>
            <attributetype>certificateRevocationList</attributetype>
            <attributetype>cACertificate</attributetype>
            <attributetype>crossCertificatePair</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="2.5.6.23" obsolete="false">
         <aliases>
            <alias>deltaCRL</alias>
         </aliases>
         <description>RFC2587: PKI user</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>AUXILIARY</type>
         <optional>
            <attributetype>deltaRevocationList</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="1.3.6.1.4.1.250.3.15" obsolete="false">
         <aliases>
            <alias>labeledURIObject</alias>
         </aliases>
         <description>RFC2079: object that contains the URI attribute type</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>AUXILIARY</type>
         <optional>
            <attributetype>labeledURI</attributetype>
         </optional>
      </objectclass>
      <objectclass oid="0.9.2342.19200300.100.4.19" obsolete="false">
         <aliases>
            <alias>simpleSecurityObject</alias>
         </aliases>
         <description>RFC1274: simple security object</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>AUXILIARY</type>
         <mandatory>
            <attributetype>userPassword</attributetype>
         </mandatory>
      </objectclass>
      <objectclass oid="1.3.6.1.4.1.1466.344" obsolete="false">
         <aliases>
            <alias>dcObject</alias>
         </aliases>
         <description>RFC2247: domain component object</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>AUXILIARY</type>
         <mandatory>
            <attributetype>dc</attributetype>
         </mandatory>
      </objectclass>
      <objectclass oid="1.3.6.1.1.3.1" obsolete="false">
         <aliases>
            <alias>uidObject</alias>
         </aliases>
         <description>RFC2377: uid object</description>
         <superiors>
            <superior>top</superior>
         </superiors>
         <type>AUXILIARY</type>
         <mandatory>
            <attributetype>uid</attributetype>
         </mandatory>
      </objectclass>
   </objectclasses>
</schema>