The CertManagement settings in the Configuration api currently refer to webhooks, but the cert is also used by the metrics server, and (once #3227 is merged) the train job status server.
It would be good to rename the config settings to avoid confusion.