access_id_CA      X509         '/DC=HK/DC=HKU/DC=GRID/CN=HKU Grid CA'
pos_rights        globus        CA:sign
cond_subjects     globus       '"/DC=HK/DC=HKU/DC=GRID/*"'