[Freeipa-users] Re: updating certificates

[Josh]

Greetings to all,

A follow up on 
https://www.redhat.com/archives/freeipa-users/2017-January/msg00051.html

I missed expiration date and now ipa-certupdate command fails with SSL: 
CERTIFICATE_VERIFY_FAILED.

Should I update httpd certificate manually or there is a workaround to 
allow ipa-certupdate to proceed?

Regards,
Josh.