diff --git a/source/operations_and_monitoring.rst b/source/operations_and_monitoring.rst
index 209cf3c..3c517ea 100644
--- a/source/operations_and_monitoring.rst
+++ b/source/operations_and_monitoring.rst
@@ -173,8 +173,10 @@ reach the |project_name| OpenStack APIs:
 
    openstack# openssl s_client -connect |public_endpoint_fqdn|:443 2> /dev/null | openssl x509 -noout -dates
 
-*NOTE*: Prometheus Blackbox monitoring can check certificates automatically
-and alert when expiry is approaching.
+.. note::
+
+   Prometheus Blackbox monitoring can check certificates automatically
+   and alert when expiry is approaching.
 
 To update an existing certificate, for example when it has reached expiration,
 change the value of ``secrets_kolla_external_tls_cert``, in the same order as
@@ -184,6 +186,14 @@ above.  Run the following command:
 
    kayobe# kayobe overcloud service reconfigure --kolla-tags haproxy
 
+.. note::
+
+   Test the installation of an updated certificate by running
+   the reconfigure command with a ``--kolla-limit`` of one of the hosts
+   where HAProxy is deployed.  This will detect if the certificate is
+   not validated by HAProxy, without stopping HAProxy services on all
+   hosts.
+
 .. _taking-a-hypervisor-out-of-service:
 
 Taking a Hypervisor out of Service