See section 3.1.2 for end-entity certs. The distinguished name of the CA should be "DC=org, DC=dutchgrid, O=Certification Authority, CN=Dutchgrid medium-security Certification Authority". It may be "C=NL, O=NIKHEF, CN=NIKHEF medium-security certification auth".