openchange revokes and issue certificates created without dns domains (ie when the certificate is created before the vdomain)