Title: #677: cert: defer cert-find result post-processing
We may need these changes in 4.5 and 4.4, too since `cert-find` is rather
broken there, too.
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code