PGP.com has a feature to include a PGP key from a X.598 cert and its private key. The cert is then included as notation data in the PGP key. An open question is how we shall handle primary and subkey - take them from two X.509 certs or only allow this import for an encryption subkey?