The nickname of the 389-ds certificate was hardcoded as Server-Cert which failed if the user had installed a third-party certificate using ipa-server-certinstall. Instead pull the nickname from the DS configuration and retrieve it based on that. https://pagure.io/freeipa/issue/8600 Signed-off-by: Rob Crittenden <rcritten@redhat.com> Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>