Hi,
If client-server TLS then:
1. No need to shut down the nodes in the first place (just replace the cert files and they will be picked up within a few minutes), if you need to speed up the process you can run `rabbitmqctl eval "ssl:clear_pem_cache()."`
2. Nodes not forming the cluster doesn't seem related to the change - have you made any other changes?
Either way, please provide the logs (although inter-node TLS, which is an Erlang feature by the way, not a RabbitMQ feature, usually doesn't provide any useful logs).
Best,