The documentation for updating custom certificates is missing in the Openshift documentation. We have documentation for moving from the internal certificates to custom here: https://docs.openshift.com/container-platform/4.13/security/certificates/api-server.html but nothing if customers need to update the custom certificates.
I have written a KCS for this here: https://access.redhat.com/solutions/7025517 which also contains warnings that the nodes will reboot if this process is followed. The ask here is can we get a section added to cover this and to warn customers that reboots are involved.

100%

1.
2.
3.