[Freeipa-devel] [freeipa PR#4172][closed] [Backport][ipa-4-6] Do not renew externally-signed CA as self-signed