The management hub uses TLS (HTTPS) to communicate between hub components and the exchange APIs. Any component that needs to communicate externally will likely use a separate certificate to communicate with the external host, for example, the SDO component's OCS API.