zk-X509: Privacy-Preserving On-Chain Identity from Legacy PKI via Zero-Knowledge Proofs. - Yeongju Bak (CoRR, 2026)