[Freeipa-devel] [freeipa PR#4172][opened] [Backport][ipa-4-6] Do not renew externally-signed CA as self-signed