Just a quick heads up that a couple of new RFCs update RFC
5280 w.r.t. i18n support.
The most notable change is a new otherName type to represent
internationalised email addresses (i.e. when the local part is not
ASCII). I have filed a ticket to support this in FreeIPA (no
Dogtag changes are needed). I don't think it is urgent, but
eventually someone will ask for it.