Request Certificate from IPA for foreman Web interface

I am hoping to request a certificate from my FREEIPA server and use the certificate for the web UI.

I am thinking about using ipa-getcert but not sure how to get the cert in a .pem for foreman.

Unless your FreeIPA CA is trusted by all browsers using Foreman it wouldn’t be very useful, will it?

The procedure how to use custom certificates is in the docs: