---
ipa_getcert_requested_hostnames:
  - name: "{{ ansible_fqdn }}"
    owner: apache
    key_location: "/etc/pki/tls/private/{{ ansible_fqdn }}.key"
    cert_location: "/etc/pki/tls/certs/{{ ansible_fqdn }}.crt"
    postcmd: "/bin/systemctl reload httpd"
    cnames:
      - "git.rockylinux.org"
...