URL:
https://github.com/freeipa/freeipa/pull/813
Title: #813: Add Subject Key Identifier to CA cert validity check
stlaz commented:
"""
I will review this but we also need a patch for 4.5 which unfortunately still uses
python-nss for certificate validation.
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/813#issuecomment-304026101