Which kind of certifcate I need to setup TLS communication between VA and IQService?

Hello guys, I’ m following the official Sailpoint guide to set up the IQService with TLS communication with the VA IQService Security Considerations. But i haven’t understood who has to give me the certificate of the IQService. Does those certificates be emmitted by Sailpoint? Or by another CA?

The certificate is in the IQ Service host’s certificate store: