If there are well-reasoned questions regarding the use of DNs and
certificates with respect to PEM, that discussion on those topics should
remain on this list. Otherwise, in the interests of world peace, please
direct further discussion on X.500 concepts, such as DNs, to one of:
mhs-ds(_at_)mercury(_dot_)udev(_dot_)cdc(_dot_)com - X.400/X.500
issues
ietf-osi-ds(_at_)cs(_dot_)ucl(_dot_)ac(_dot_)uk - X.500 issues
iso(_at_)nic(_dot_)ddn(_dot_)mil - OSI issues
If, in fact, you address your generic X.500 question to either of the
two last lists, I will be happy to answer it there.
/mtr