OpenShift metering documentation: ... _etcd-server-ssl._tcp.ocp43 IN SRV 0 10 2380 etcd-0.ocp43.example.com. _etcd-server-ssl._tcp.ocp43 IN SRV 0 10 2380 etcd-1.ocp43 ...
This shows how OpenShift has an easy way to manage SSL certificates with the oc command line utility. Also, OpenShift provides many methods for SSl termination including reencrypt and edge. You can use Let's Encrypt to test different scenarios on a test system before you go and create permanent SSL certificates.
Ferrites are materials
OpenShift Online Starter's Status Page - [APAC] External SSL certificate renewal on starter-us-east-1b.