Major Description
Kudu generates certificates when TLS is enabled and if the user does not provide them. These certificates have Kudu specific encodings which are checked for in the RPC negotiation phase.
If the certificates are user provided, it's highly likely that they will not contain these encodings, thus causing the certificate negotiation phase to fail.
We can check for and verify these encodings if the certificates are provided by Kudu, else we can skip that step in the negotiation phase if the certificates are user provided.