[Freeipa-users] Re: Host vs. service certificates