Digicert revoking certain certs failing CNAME validation