When no security domain is specified for BaseCertLoginModule, this log message is printed to the console:

"The JSSE security domain other is not valid. All authentication using this login module will fail!"

I believe that whether this is actually the case ultimately depends on the verifier. In the case of AnyCertVerifier (or any customer Verifier), the security domain will not be necessary. This means that the login module will actually work, despite the above message to the contrary.