That's because some people came along and produced a parallel standard [1] adding loads more rules, clarifications and constraints to convert X509 into somethin

That's because some people came along and produced a parallel standard [1] adding loads more rules, clarifications and constraints to convert X509 into something approximately fit for purpose. [1] https://github.com/cabforum/servercert https://github.com/cabforum/servercert