One more question to ask,
1. Both /etc/dirsrv/alias and /etc/http/alias store certificates for themselves. Right?
2. Dogtag is a cerfificate lifecycle management system, e.g issue/renew/rovke. Any CSR
would validate by httpd first and then forward to dogtag subCA? per
https://ftweedal.fedorapeople.org/ipa-cert-renewal-deep-dive.pdf
3. Where do certificates issued by dogtag store? any stuff would store in 389 DS?
Thanks,