I find the presentation of the JVM system properties section confusing.

I think it would be more discoverable and grokable if:

1. the heading "JVM system properties" was changed to something like "Certificates" 
2. there was an immediate sub-title "Certificate authority"
3. there was another sub-title "Client certificates" above "A typical application will also ... the client presents an SSL certificate to the MongoDB server"
4. we provide an example for the keyStore prepare, like 2. openssl pkcs12 -export -out mongodb.pkcs12 -in client.pem
5. we link to the server docs about setting up client certificate validation