My company's PIV/AD credintial is user@example.com. We set up our IPA credintial as user@linux.example.com

example.com and linux.example.com are completedly seperated domain/realms, no trust or interaction whatsoever. 

I took the user and CA certs on the PIV card and put them into ipa. I was able to authenticate to ipa webui with my PIV card.  


My question is does ipa do online certificate status protocol check for the user@example.com cert? Any way to verify that? 

Thanks.