What is the usecasae of --ca-dn when using elasticsearch-certutil utility

It doesn't do anything useful in current versions of certutil

In older versions it was possible to generate a CA on the fly while you generated certificates, but that option has been removed.