I'm puzzled by your statement about a problem with residential
PCAs and CAs with regard to name subordination.
-----
Your example was quite clear. However, RSA & TIS's residential CA's do
not appear to conform. I believe Steve Dusse's example illustrates
the case for RSA. I include below an example from TIS for your
examination. (in full encoded certificate format)
-Ray
Originator-Certificate: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Issuer-Certificate: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=
Issuer-Certificate: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