Title: #490: certdb: use certutil and match_hostname for cert verification
I tried to use the wonderful github tool to resolve conflicts to make this more
review-friendly but I guess it kind of missed the magic, it's ready for review
anyway, please, finish it.
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code