Title: #644: extdom: improve certificate request
LGTM. I read the code but since SSSD counterpart is currently on review, travis
fails the build.
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code