URL:
https://github.com/freeipa/freeipa/pull/859
Title: #859: Add CommonNameToSANDefault to default cert profile
MartinBasti commented:
"""
How are upgrades of cert profile handled? (if they are needed)
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/859#issuecomment-306761729