$ monerod --help | grep ssl
--rpc-ssl arg (=autodetect) Enable SSL on RPC connections:
--rpc-ssl-private-key arg Path to a PEM format private key
--rpc-ssl-certificate arg Path to a PEM format certificate
--rpc-ssl-ca-certificates arg Path to file containing concatenated
--rpc-ssl-allowed-fingerprints arg List of certificate fingerprints to
--rpc-ssl-allow-chained Allow user (via --rpc-ssl-certificates)
--rpc-ssl-allow-any-cert Allow any peer certificate