Console shows x509 error when requesting token from oauth endpoint

On a hypershift cluster that has public certs for OAuth configured, the console reports a x509 certificate error when attempting to display a token

4.12.z

always

1. Create a hosted cluster configured with a letsencrypt certificate for the oauth endpoint.
2. Go to the console of the hosted cluster. Click on the user icon and get token.

The console displays an oauth cert error

The token displays

The hcco reconciles the oauth cert into the console namespace. However, it is only reconciling the self-signed one and not the one that was configured through .spec.configuration.apiserver of the hostedcluster. It needs to detect the actual cert used for oauth and send that one.