Freeipa CA and katello

I can’t figure out how to create a certificate for katello. I mean I have the service in freeipa and I’ve already created the nssdb on katello I just can’t figure out where I should put those certificates. The katello server is already a member of the freeipa domain. Freeipa version 4.10 and katello version 3.5/4.7

Just set it up like any other custom certificate:

which steps should I do after I have already done this: Automated certificate requests with Certmonger ?
Just the:
Deploying a Custom SSL Certificate to Server foreman and Deploying a Custom SSL Certificate to Hosts ?