See attachment for more details.
Also some of the documentation refers to deploy the replica set with tls enabled as false but the replica set fails with this option being false.