Hi Rob,
it turned out someone imported a plain text certificate into the binary userCertificate
attribute, probably by manual means / direct insert into LDAP. The resulting error was
thrown for all users and admins using the Webinterface of freeIPA, so this one certificate
completly knocked out the named tab ( Authentication -> Certificate -> Certificate )
for all users and administrators. Only manual removal from ldap via external software
brought it back to life.
Best regards,
Nico