URL:
https://github.com/SSSD/sssd/pull/570
Title: #570: p11_child: add OpenSSL support
sumit-bose commented:
"""
ah, sorry, I meant /etc/sssd/pki/sssd_auth_ca_db.pem.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/570#issuecomment-393464732