List explicit apiserver flags at end of openssl certificate section

[singhvishalkr]

Closes #55501.

/sig docs
/kind documentation
/language en

The openssl section of tasks/administer-cluster/certificates ends with the line "Finally, add the same parameters into the API server start parameters." The reporter on #55501 pointed out that there is no obvious anchor for what "the same parameters" refers to: the easyrsa section a few hundred lines earlier lists --client-ca-file, --tls-cert-file, and --tls-private-key-file as a numbered step, and the openssl branch only alludes to it in prose. This patch replaces the prose line with a numbered step that includes the same shell block, so the openssl reader sees the explicit flag list inline.

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign sayakmukhopadhyay for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• content/en/docs/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[singhvishalkr]

Netlify preview is failing with Header/Redirect rules, but this PR only changes content/en/docs/tasks/administer-cluster/certificates.md (adds the explicit --client-ca-file, --tls-cert-file, --tls-private-key-file flags after the openssl steps). I don’t see any redirect/header config touched here, so this looks like an infra/preview issue rather than the doc change.