(ITS#7033) suffix invalid dn :21