1. Take your idp.example.ac.uk.csr file and submit to your chosen Certificate Authority. There are many certificate signing services available. Once the request is validated, you will receive a .cer/.crt file corresponding to the request you sent, plus any required intermediate certificates, which you will need to re-import in the next step.