I'm the assigned reviewer from the DNS Directorate (dnsdir) for this draft. There is no direct interaction with DNS described by the document. The only mention of DNS is that requestors use a "DNS name" in certificate requests. I am not familiar enough with CMP or the surrounding technologies to review the content otherwise. This draft is quite long (which is acknowledged by the authors), weighing in at 106 pages. There might be discoverable nits still present in the document, but the sheer length combined with the lack of specific expertise on my part makes them difficult to find.