Instructions with images still coming. Text instructions below;
I haven't been back on-site with an iPad to make image instructions but I will type some basic ones here if you want to try adding it yourself.
Tap to download the certificate, when it asks "This website is trying to download a configuration profile. Do you want to allow this?" tap Allow
Open the Settings app and in the top left tap Profile Downloaded
It should be called "CMC-Trust-CA" tap Install as many times as necessary and enter your pin when required then Done.
In Settings, to back out to General > About > Certificate Trust Settings
Tap to enable the CMC-Trus-CA certificate