I've many customers with a similar approach, but they embed those information into csr_attributes.yml / into the certificate. not as facts