Other components, such as a PKI (Active Directory Certificate Services, DogTag, OpenSSL) service and DNS (Windows DNS or BIND) may also be included on the same server or on another domain-joined server.