add new oid organizationIdentifier (2.5.4.97) ejbca 8.2.0.1 Community

[jpertuz-19]

Hello. I want to add a new OID, organizationIdentifier (2.5.4.97), to record company information. I am following these steps:

1. First, I add the following to the profilemappings.properties file: DN;2.5.4.97;202;ORGANIZATIONIDENTIFIER;202;organizationIdentifier (OID 2.5.4.97);DN_ORGANIZATIONIDENTIFIER

2. Then, I add DN_ORGANIZATIONIDENTIFIER=Organization Identifier to languagefile.en.properties.

Finally, I build and deploy. EJBCA picks up the changes, but when I test an issuance within the RA, I get an error:

2026-07-27 16:56:07,768 INFO [org.ejbca.ra.EnrollMakeNewRequestBean] (default task-38) End entity information does not fulfill profile: org.ejbca.core.model.ra.raadmin.EndEntityProfileValidationException: Unsupported Subject DN Field found in:..xxxxxx... Internal EJBCA error code: USER_DOESNT_FULFILL_END_ENTITY_PROFILE

I'm not sure if I also need to enable any parameters in the certificate profile??

[primetomas]

8.2.0.1 is a very old version, one that has public CVEs. We advice against using this version.

OrganizationIdentifier for PSD2 is currently available out-of-the-box as an Enterprise feature. See https://docs.keyfactor.com/ejbca/latest/certificate-profile-fields#PSD2-Qualified-Certificate-Statement.