DC (domainComponent) is a valid component of an X509 subjectName. Nevertheless apache doesn't have corresponding environment variables in mod_ssl through which a requirement could be defined and which would be added to the environment table. Please add them quickly!