URL: https://github.com/freeipa/freeipa/pull/131 Title: #131: Fixed script generating certs to address untrusted sub-ca frasertweedale commented: """ Obvious ACK. """ See the full comment at https://github.com/freeipa/freeipa/pull/131#issuecomment-251532635