Can somebody point me or explain is there difference for preparation of certificate for NSX T Manager nodes and cluster in those two cases (VIP vs LB)?

I am trying to find any info about this, but no luck. Or maybe I am asking unnecessary question if it is all the same.

Does LB in front of NSX-T Manager cluster is using SSL offloading or rewriting?  What configuration I need to put on LB in front of NSX-T Manager cluster?

Maybe I missed article about  this.

Cheers!