Do not access CA unless available
Do not resolve autodiscover records for domains not managed
Improve precondition fail message
Check CA available issuing certificate
Add webmail ssl editable conditional
Improve preconditions