Document URL: 
Either of:
https://docs.openshift.com/enterprise/3.2/install_config/upgrading/automated_upgrades.html
or:
https://docs.openshift.com/enterprise/3.2/install_config/certificate_customization.html
Or perhaps a new document? My money is on upgrades


Section Number and Name: 
New section for certificate retooling

Describe the issue: 
We recently released the certificate retooling ansible playbook. This is a very useful function that allows the reconfiguring/redeploying of certificates and kubeconfigs, and has already been useful for me in successfully changing, for instance, the internal masterUrl api url without much hassle whereas before it required manually mucking about with kubeconfigs, etc. This tooling is a large enough new feature and was just released in an advisory so we should prioritize getting this documented soon since it's already out.


Suggestions for improvement: 
Already some usage examples here:
https://bugzilla.redhat.com/show_bug.cgi?id=1275648#c27

Should include a couple examples such as above, and a quick description of what gets updated (kubeconfigs, certs, anything else. Does {master,node}-config.yaml get updated?)

Additional information: 
Let us know if any more info is needed, thanks!