i decided to break backward compatibility here because when you buy a certificate, the domain name is already the CN field. i hoped that this default value would serve most users most of the time. but thats not up to me to decide.