Also, you can't issue a new cert for a domain until the old one is revoked.