Doc: Pacemaker Administration: Explain use of TLS certificates.
This does not explain how to set up your own CA, public/private key pairs, etc. That seems beyond the scope of pacemaker documentation.