Get the certificate from freeIPA

These commands extracts the host certificate and key and the IPA CA certificate from nssdb. This is required when using ccm-fetch over SSL with a non-kerberos apache webserver. 
put all the `mkdir` in one line