Foreman 1.17 and replacing the Web SSL

How to replace the web ssl but leave puppet alone.
Yes there are old docs covering this but all the paths they talk about have changed with the newer version of Foreman and Puppet.
I have never replace a cert before and after generating a csr I have been given a cert and the root/inter certs and unsure as to what to do, eg Puppet is now in the Opt dir not var/lib/puppet, any idiot instructions would be most welcome.

Foreman and Proxy versions:
1.17.0-RC2, 1.17.0-0.1