The process to provision your information can be found here in-depth, you can skip right to the create a certificate profile step. But like you said, you are still awaiting public trust identity validation. You could potentially test using a private trust model
Regarding where is the certificate store, it's not on an AKV, its stored on an hsm.