[Freeipa-users] help understanding "ipa cert-find" options