Minor changes

[jessecarter111]

• Change name of dnsDomain property to something more descriptive
• Add explicit mention of x509 certificates
• Clarify control 10

[trbouma]

Can we just say 'full certificate' - x509 is one of several formats and does not need special mention.