In ipatests/test_xmlrpc/test_service_plugin.py, lines 426:436, a test case exists that verifies that a certificate with different than expected issues cannot be added to a service. During implementation of https://fedorahosted.org/freeipa/ticket/4559 this was changed though, the validation was removed and certificate can be added regardless of the issuer. As a result the test fails and needs to be fixed/removed accordingly.

Proposed solution: change the negative test case to a positive one, which would verify that the certificate with random issuer is correctly added.