[Freeipa-devel] [freeipa PR#5495][closed] Ensure that KDC cert has SAN DNS entry