Google.com (and my bank) use a DN certificate, if it's good enough for them it's good enough for anyone.