[Freeipa-devel] [freeipa PR#4148][closed] Do not renew externally-signed CA as self-signed