PingDS 7.5.1 octetStringSubstringsMatch Expand/Collapse All octetStringSubstringsMatch Names octetStringSubstringsMatch Origin X.500 Assertion syntax OctetString OID 2.5.13.19