Speaking for the TIS PCA, we make a reasonable effort to have the DNs
conform to the X.500 and NADF rules. We probably don't know
everything there is to know about these rules, and we have already
encountered resistance from some clients who want DNs that clearly
fall outside of the NADF guidelines.
I'd agree that you can't please everyone. My point is simply that if there
is any desire to make use of X.500 to support PEM certficates, early
harmonization is surely a lot easier than doing things later.
With respect to NASA's DN, are you aware of a MITRE study in progress
that is looking at, among other things, how U.S. government entities
should be assigned DNs?
I'm not aware of the MITRE study in particular, although I know there are
those who would like to see o=gov under c=US. I'm not a great fan of extra
levels of indirection.
-Peter