Similar initiative

[Tcharl]

Hello,

Just to mention that I've made a similar initiative. If you have a bit of time to take a look, contribution welcomed! (for example, I'm definitely struggling using freeipa subca to emit apiserver certificates