I believe this guide is also for cloud kerberos trust deployments as well? I.e. a customer wants to deploy a cert to enable RDP. This is also linked in the FAQ section of the Cloud Kerberos Trust doc.