I followed this link:
https://docs.software-univention.de/domain-4.0.html#extdom:ssl:sign
The instructions fall under this title:
3.2. Signing of certificate signing requests by the UCS certificate authority
Your instructions are not found there. Will try them in any case.