identification: Optionally match RDNs in any order and accept missing RDNs