Distinguished Names for AD should follow this structure. You do not have to specify both common name and organization unit:
See Also
Distinguished Names for LDAP and AD
Specify a Distinguished Name for LDAP
Specify a Username for AD
Specify a Base DN