certstore: add support for asterisk form to DNTree replacement