The all-in-one installer creates a self-signed certificate during the installation process.
This requires to mark the registry as "unsecure" on OCP.
Replacing the cert can be tricky.

This request is have the possibility to use a custom certificate defined via a command line option Eg.:

./openshift-mirror-registry install --sslCert ssl.cert --sslKey ssl.key