Hello,


I'm having various problem on our FreeIPA setup, like can not establish new replica server or add a client anymore. Initially we had certificate issue, then we upgraded the Master FreeIPA server (CentOS 7.0.146) to FreeIPA v4.4.0) few months back.


On master server it shows up 4 entries for IPA CA certificate. Is this normal?


[root@ds01 ~]# certutil -d /etc/pki/nssdb -L

Certificate Nickname                                         Trust Attributes
                                                                                SSL,S/MIME,JAR/XPI

EXAMPLE.COM IPA CA                                           CT,C,C
EXAMPLE.COM IPA CA                                           CT,C,C
EXAMPLE.COM IPA CA                                           CT,C,C
EXAMPLE.COM IPA CA                                           CT,C,C

thank you,

regards,

Bhavin