You should probably configure a certificate with that set of details, run it through Apache, and check what comes out.  It isn't clear to me if that will turn up with the `,` escaped, unescaped, or what, but it ... could be trouble, and testing something that is [dubiously legal as per RFC2253](http://tools.ietf.org/html/rfc2253#section-2.4) is not awesome.