[Freeipa-users] Removal of obsolete certificates from o=ipaca