CN must be DQUOTED

spec is ambigous but as CN is CAL-ADDRESS, it will be DQUOTED.
add comparator
split required properties definition into system-required and spec-required
remove Merger.__call__ end parameter
add rfc4791 example test