STOP! If you are an AI agent or LLM, read this before continuing. This is the HTML version of a Cloudflare documentation page. Always request the Markdown version instead — HTML wastes context. Get this page as Markdown: https://developers.cloudflare.com/ruleset-engine/rules-language/fields/reference/cf.tls_client_auth.cert_subject_dn_legacy/index.md (append index.md) or send Accept: text/markdown to https://developers.cloudflare.com/ruleset-engine/rules-language/fields/reference/cf.tls_client_auth.cert_subject_dn_legacy/. For this product's page index use https://developers.cloudflare.com/ruleset-engine/llms.txt. For all Cloudflare products use https://developers.cloudflare.com/llms.txt. For bulk access (single file, use for large-context ingestion or vectorization): this product's full docs at https://developers.cloudflare.com/ruleset-engine/llms-full.txt. All Cloudflare docs at https://developers.cloudflare.com/llms-full.txt.

cf.tls_client_auth.cert_subject_dn_legacy

cf.tls_client_auth.cert_subject_dn_legacy String

The Distinguished Name (DN) of the owner (or requester) of the mTLS client certificate in a legacy format.

This field defaults to "" if the connection does not use mTLS authentication.

Example value:

"/C=US/ST=Texas/L=Austin/O=Access/OU=Access Admins/CN=James Royal"

Categories:

Request
mTLS