[Freeipa-users] Re: Converting self-signed root CA to intermediate CA