FreeIPA: Failed to start pki-tomcatd Service

ipactl restart failed with the error “Failed to start pki-tomcatd Service” — I investigated and discovered one of my certificates did not have the appropriate trust settings.