IPA Server certificates may not have a subject key identifier extension

Issue

• The embedded Certificate System provided by Dogtag in IPA has a profile for automated server and service certificate enrollments that is missing a subject key identifier extension.
• Although not a critical extensions for non certificate autorithy entities, some applications may rely on the subject key identifier extension presence in a certificate.