One small remark I would like to additionally make with respect to footnote number 27 on page 11 is the following. 

According to this footnote the country (C) field in the subject Distinguished Name of an end entity certificate should 
reflect upon the country of origin of the certified entity and not the country where the CA is operating. Actually the 
use of the specific field is discouraged in such cases where the end entity stems from a different country than the 
country where the CA operates. 

But what should happen in the case where the value of this field is part of the namespace under which the CA signs end 
entity certificates? Perhaps we should consider altering this footnote in order to include the description of such a 
situation, since many CAs already issue certificates under such a namespace.