Your private.pem file from the Enable Banking dashboard. It stays on your server and is never shared.

Filled automatically from your .pem filename. From your Enable Banking dashboard under Applications.

Register this exact HTTPS URL under Allowed redirect URLs in your Enable Banking application. It must reach this container's /callback route.