Hi Rob, it won't work on 4.4.0 for now.
# python2 /tmp/checkcerts/ipa-checkcerts.py Traceback (most recent call last): File "/tmp/checkcerts/ipa-checkcerts.py", line 21, in <module> from ipalib.install import certstore ImportError: No module named install
I guess it's not appropriate to use this thread for my issue, but as soon I go back in time, dogtag-ipa-ca-renew-agent-submit, ipa-dnskeysyncd and named-pkcs11 all read messages about "LDAP error: Invalid credentials: bind to LDAP server failed"