If you are using the certifiers within your own system only (not cross certifying with other domino systems), then I would just create the new OU certifier, and re-certify all the old users under that OU. I did this years ago when I moved a large organization from a 3-level OU structure to a 1-level OU structure.