To create a certificate request for a service principal
ipa-getcert request -f <OUTPUT_CERT_PATH> -k <OUTPUT_PRIVATE_KEY_PATH> -K <SERVICE/PRINCIPAL> -D <HOSTNAME>
To verify a certificate request:
getcert list [-i <REQUEST_ID>]