[Freeipa-devel] [freeipa PR#5499][opened] [Backport][ipa-4-8] Ensure that KDC cert has SAN DNS entry