Setting up TLS/SSL with PEM format CA

Looks like I found the answer:

Enabling TLS on Elastic Cluster. abcdnvdc | by Shubhmeet Kaur | Medium