Title: #974: Test for Certificate Identity Mapping
This PR replaces #399 which is orphaned and I'm no longer able to push into it.
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/974/head:pr974
git checkout pr974