有效：</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl get secret -o json istio.my-sa -n my-ns | jq -r &#39;.data[&#34;cert-chain.pem&#34;]&#39; | base64 --decode | openssl x509 -noout -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            99:59:6b:a2:5a:f4:20:f4:03:d7:f0:bc:59:f5:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: O = k8s.cluster.local
        Validity
            Not Before: Jun  4 20:38:20 2018 GMT
