See 03 TLS Certificates for Cluster Components.md in my CKA notes