diff --git a/doc/source/install/advanced_deployment/tls_everywhere.rst b/doc/source/install/advanced_deployment/tls_everywhere.rst
index 34914ec5..e8a63264 100644
--- a/doc/source/install/advanced_deployment/tls_everywhere.rst
+++ b/doc/source/install/advanced_deployment/tls_everywhere.rst
@@ -1,5 +1,5 @@
 TLS everywhere for the overcloud
-================================
+--------------------------------
 
 It is possible to deploy most of the services to use TLS for communications in
 the internal network as well. This, however, needs several more certificates
@@ -40,9 +40,6 @@ services will need. These create service principals for services such as httpd,
 mysql and haproxy, and are used to requests the certificates for the specific
 service users with the correct SubjectAltNames.
 
-Deployment workflow
--------------------
-
 The following are instructions assuming the default CA, which is FreeIPA.
 
 CA setup