Am I cool to create a client cert with the CN of example.com, or does it need to be reverse lookup-able?