Retrieve user information for PKI artifact generation

The following questions will have to be answered from both the functional and technical perspective:

Some information will come from user information provided on user creation in Nuxeo:
email (user email)
userID (nuxeo id / login)

• a deplyment descriptor (this might be too limiting as many organizations have users from multiple locations

commonName (CN)
countryName (C)
organizationalUnitName (OU)
organizationName (O)

localityName (L)
stateOrProvinceName (S)

Another question is related to:
certificate start and expiration, or certificate duration from them moment of creation