Certificates can be created with other configurations for the DN instead of the common O=,C=,OU=,S=,CN=,E=,L= format. for example, I have one based solely on 0.DC=,1.DC=,OU=,CN=, and I cant even find domainComponent as an option. The default setup is unsuitable in many applications, and should be used as a guideline only. the 0.DC,1.DC,OU,CN layout matches an existing LDAP infrastructure, and therefore is suitable to my needs specifically, however, the ability to so customize will be of use to many people. I think the default displayed boxes near the top of the form should be overridable on a per-database basis as well, if feasible.