Keygen page should check the policy of the CA regarding DN and allow to set all the required fields. Also mandatory and fixed fields should be honoured.
