Adding another cloud connector in that forest, should be as simple as downloading and installing the cloud connector via wizard on a properly sized 64-bit Windows server that is a member of that forest.
I am not sure what Certificate you're talking about; please be specific?
All certs are provided to you (publicly rooted) unless you choose to use your on Certification Authorithy.