I have a manjorao desktop in the environment that i need to be able to access the freeipa based systems and not get cert errors every where. I will probably attempt to build the client on that system in the future but right now i just need the certs freeipa made to be valid. how does one go about exporting the root cert and then importing it in a way chrome will accept its validity or is that a matter of getting the enterprise tools to force it to work?