check the return value of dn_expand() for CNAMEs