[Freeipa-users] PKI signing certificate question

[William Muriithi]

Hello

I want to use an external certificate when setting up a new FreeIPA
next week and plan to send the CSR tomorrow.

I would like to source a certificate for example.com and use it on
FreeIPA on eng.example.com.  I can't specifically set the FreeIPA on
example.com because we have active directory on corp.example.com

Is there a way for using FreeIPA with such a setup?  I am hoping that
if I can setup FreeIPA using example.com, I can be able to generate
certificates for both Windows and Linux plus other like
vpn.example.com that don't sit well on either AD or FreeIPA domain.

Whats the best way to approach this?  If not possible, would setting
FreeIPA as a sub domain for active directory help?

Regards,

William