Title: #5574: [Backport][ipa-4-9] ipa-cert-fix: Don't hardcode the NSS certificate
This PR was opened automatically because PR #5525 was pushed to master and backport to
ipa-4-9 is required.
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5574/head:pr5574
git checkout pr5574