custom cert for only a few nodes of a WAS cluster

Question

We have a peculiar WAS v85 environment and am trying to solve a cert/security ask from app team:

• One multi node cluster.
• Only half of them get live tra