My problem with pki-tomcatd not restarting after loading the Let's Encrypt certs was
solved.
My mistake was that for some reason I thought I needed to install tomcat as part of the
prerequisites.
When I started over and skipped the tomcat installation then everything worked fine.
My FreeIPA with Let's Encrypt certs can be read at
https://docs.google.com/document/d/1tnxkNoq0wZJtr0gdG6ZkhIisF4o-DRen5aM3V...