ipatests: CA renewal must refresh cn=CAcert
    
    Add a test checking that the entry cn=CAcert,cn=ipa,cn=etc,BASEDN
    is properly updated when the CA is renewed
    The test also checks that the entry
    cn=DOMAIN IPA CA,cn=certificates,cn=ipa,cn=etc,BASEDN properly
    contains ipaconfigstring: compatCA
             ipaconfigstring: ipaCA
    
    Related to https://pagure.io/freeipa/issue/7928
    
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>