Deploy Foreman with cert not from puppet

On CentOS 6, the following settings allow me to use a CA-provided cert instead of a puppet cert.

    $tlsdir = "/etc/pki/tls"

    class { '::foreman':
        client_ssl_ca   => "${tlsdir}/certs/IntermediateCA.crt",
        client_ssl_cert => "${tlsdir}/certs/star.domain.com.crt",
        client_ssl_key  => "${tlsdir}/private/star.domain.com.key",
    }

    class { "::foreman_proxy": }

    class { "::puppet":
        # Generated per http://curl.haxx.se/docs/caextract.html
        server_foreman_ssl_ca => "${tlsdir}/certs/ca-bundle.crt",
    }