Using certutil, I'm able to extract my localhost CA using this command.
certutils -L -d dbm:/etc/ipa/nssdb -a -n 'Local IPA host'
However, I need a signing key to create a private key. Is there a method to extract a
private key that signed my localhost CA from the endpoint, or does this key exist on my
server?
Thank you.