log dogtag errors
    
    If we get an error from dogtag we always did raise a
    CertificateOperationError exception with a message describing the
    problem. Unfortuanately that error message did not go into the log,
    just sent back to the caller. The fix is to format the error message
    and send the same message to both the log and use it to initialize the
    CertificateOperationError exception. This is done in the utility
    method raise_certificate_operation_error().
    
    https://fedorahosted.org/freeipa/ticket/2622