Hello,

Some time ago IETF has finalized RFC 8398 (Internationalized Email Addresses in X.509 Certificates). It describes using EAI in X.509 certificates, validation rules of such certificates etc.

There are a lot of standards where ASCII-only email is the only option, and new standards allowing the EAI are just appearing. The X.509 certificates and email in it is just one such a place.

I'm familiar with OpenSSL enough to implement the RFC 8398 (Internationalized Email Addresses in X.509 Certificates) standard in OpenSSL code, if the UA community is interested enough in it.

Thank you!

SY, Dmitry Belyavsky