IPA supports multiple Cert Profiles out of the box and more can be added for custom requirements. The getcert request -T option should support this.
Request that the role be updated to expose a new parameter profile that is passed as an argument to getcert request -T amongst other arguments.