[OSDOCS-14048]: Updating API server certificate docs

Author: lahinson

security/certificates/api-server.adoc

@@ -13,7 +13,7 @@ by one that is issued by a CA that clients trust.
 
 [NOTE]
 ====
-In hosted control plane clusters, you cannot replace self-signed certificates from the API.
+In hosted control plane clusters, you can add as many custom certificates to your Kubernetes API Server as you need. However, do not add a certificate for the endpoint that worker nodes use to communicate with the control plane.
 ====
 
 include::modules/customize-certificates-api-add-named.adoc[leveloffset=+1]