All:
I realized that multiple items were included in the department submission, and that I
needed to break them into separate files. For a root and two intermediates,
ipa-cacert-manage install succeeds on each.
However, I still get error on ipa-certupdate:
"Connection to https://<freeIPA_server>/ipa/json failed with [SSL:
CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)"
Any thoughts?