Just been playing around with different profiles and eventually got to the point where if I setup the SOA with the master as ca.example.com. then the domain works.
Is there some remnant of the example.com domain somewhere that I need to change?
EDIT – Changing the master to ca.example.com. and then back to ca.mydomain.com seems to resolve the issue…