IPACertRequest.get does not validate if a cached cert is still valid. It should perform at least two tests:
- check the status of the certificate in IPA. The cert may have been revoked by an admin through web interface of ipa tool.
- check expiration date is below a configurable threshold, e.g. still usable for 30 days.