This patch causes the 'sslserver' certificate for a CA clone to be signed by its associated master CA during configuration, and resolves the following bug: * Dogtag TRAC Ticket #816 - pki-tomcat cannot be started after installation of ipa replica with ca <https://fedorahosted.org/pki/ticket/816> This was necessary to avoid any changes which may have been made to the X500Name directory string encoding order (i. e. - creating a Cloned CA on Fedora 20 from a Master CA on Fedora 19). This was also tested with an installation of IPA on Fedora 19, and a replica installation on Fedora 20 (after adding "|^/ca/ee/ca/profileSubmit" to the "/etc/httpd/conf.d/ipa-pki-proxy.conf" on the Fedora 19 master -- an IPA ticket will be filed for this issue).