The first part isn't super reliable. Historically, CAs have just let you put whatever you want there and only enforced the common name. They're supposed to be cleaning up their act (at least for recently-issued certs), but I'd still only trust it for EV certs.

The rest is all valid. (Unless you assume that the hack also hacked DNS, which is plausible but unlikely.)