Bob Jueneman reports:
... in fact there is nothing in either X.509, X.500, PEM, or anywhere
else that compels the use of an X.400-like organizational name, or mailing
address style names, or anything else. We've just made assumptions based on
certain examples.
In particular, an Internet DNS name is a perfectly valid DN...
Back in the old days of PEM alpha tests, I tried to get a certificate
with the DN "o=gnu(_at_)toad(_dot_)com". ("o=" is required in a DN; all else is
optional.) The TIS CA refused to issue it, on the grounds that they
wanted to force people into the verbose X.400 style. Perhaps this is
what you meant by "certain examples".
Is there a CA now operating which will issue such certificates?
John Gilmore