Maybe I am confused....

On MSDN it states in the article, "How to: Enable Encrypted Connections to the Database Engine (SQL Server Configuration Manager)":

"To use encryption with a failover cluster, you must install the server certificate with the fully qualified DNS name of the virtual server on all nodes in the failover cluster."

This would make it appear as though certificates can be used to secure a cluster. Am I missing something here?