IAM in Service Catalog
The newest Person Directory servers now use an InCommon server cert. You're Your application will need to include the Comodo root cert in your CACert file (identified as "/path/to/uwca.crt" below) to connect. See: Person Directory - Combined UWCA InCommon Root Certs. During initial testing in 2016 several apps took advantage of a certificate bundle and didn't require changes.