Certificate generating with old server name

OES 2015.1 server was renamed.  The correct name is reflected in local hostname file, as well as nds.conf. Also, the server shows up under the correct name in eDirectory.  When the old certs expired and I regenerated new ones (ndsconfig upgrade) they were created with the old hostname.  Any ideas where/why ndsconfig is getting the old hostname?