The Signer Distinguished Name (SDN) is required when you enable a digital signature check and exclude only files signed by a specified process signer.
Right-click an executable and select Properties.
On the Digital Signatures tab, select a signer and click Details.
On the General tab, click View Certificate.
On the Details tab, select the Subject field.
The SDN appears.
For example, Firefox has this SDN:
CN = Mozilla Corporation
OU = Release Engineering
O = Mozilla Corporation
L = Mountain View
S = California
C = US
Note
The SDN fields appear in reverse order from the required format.
Copy the contents of the Subject field to a temporary location.
Edit the information to reverse the order of the elements, remove line breaks, and separate the elements with commas.
For example, the SDN required format is:
C=US, S=CALIFORNIA, L=MOUNTAIN VIEW, O=MOZILLA CORPORATION, OU=RELEASE ENGINEERING, CN=MOZILLA CORPORATION
When creating exclusions, copy and paste the certificate details as a single line of text to the Signed by field.