A Distinguished Name (DN) is a unique identifier for an object in an LDAP directory, such as a user, a group, or an organization. A DN consists of a sequence of relative distinguished names (RDNs), which are attributes that describe the object. The most common RDNs are:
Common Name (CN): The name of the object, such as a user's full name or a group's name Country : The two-letter ISO code of the country where the object is located, such as US or PK User container (UC): The name of the container that holds the user objects, such as Users or People Domain Component (DC): The name of the domain that the object belongs to, such as checkpoint.com or example.org An Organizational Unit (OU) is not a component of a DN, but a type of object that can be used to organize other objects in a hierarchical structure. An OU can have its own DN, which includes the OU attribute as an RDN, such as OU=Sales,DC=checkpoint,DC=com.
The references are:
Check Point R81 Identity Awareness Administration Guide, page 14
LDAP Distinguished Names
What is a Distinguished Name?