HAProxy should always be listening on port 22623 on the CSAH node. If it is not, restart the service.
If the bootstrap or master nodes OS deployment fails due to a certificate error, make sure that the CSAH node time zone is set to UTC before starting the OCP deployment.