Best solution for changing domain name?

Have you looked at How to import UCS root CA on Windows clients

That is also not hard requirement. The domain can be configured since the last update.