Namecoin has made utilities similar to this (in order to constrain all existing CAs from signing `.bit` domains) so I assume so.