I have been alluding for a while about my ideas for future FreeIPA/Dogtag PKI integration; I finally put the ideas down in a blog post. If you are interested in this aspect of IdM please read it; all feedback is welcome! http://blog-ftweedal.rhcloud.com/2015/11/freeipa-pki-current-plans-and-a-fut... Thanks, Fraser