In this area, we can upload our own certificates for HA. I thought this certificate will use for the https connection, but it does not. According to the log that rancher-ha shows, seems rancher always generate a self-signed certificate for the https connection.
When you upload certs, those will be used to secure rancher server to agent communication. Otherwise the rancher generated certs will be propagated to the hosts.