You manage certificates in Domino with One Identity Manager. These are mapped in the One Identity Manager database as Notes certificates. All certificates known to the Domino directory are mapped.
Certificates are loaded into the One Identity Manager database through synchronization so they can be referenced when new user accounts are added. User accounts that are added with One Identity Manager contain a reference to the certificate in use. This means you can recover their ID files with this certificate at anytime. The certificate is the deciding factor for mapping more user account properties when managing user accounts with account definitions.
You can only synchronize Domino directory certificates. If a user in the target system has been created with an external certificate, One Identity Manager cannot determine the certificate and therefore cannot allocate it to the user account.