The fact that those certificates had been issued without a secure method of verification is the thing that was wrong with those certificates.

Dyndns is not the only use case for having someone control a subdomain without having the full trust of the root domain.