OU=bearers UID=jdoe cn mail (...) userCertificate (CertInfo cert1, CertInfo cert2) <-- multivalued attribute knowing that CertInfo is a custom attribute which can be defined as follow: class CertInfo { byte[] base64; int status; }