dlinks=true>$ kubectl exec $(kubectl get pod -l app=httpbin -o jsonpath={.items..metadata.name}) -c istio-proxy -- ls /etc/certs
cert-chain.pem
key.pem
root-cert.pem
</code></pre><div><aside class="callout tip"><div class=type><svg class="large-icon"><use xlink:href="/v1.1/img/icons.svg#callout-tip"/></svg></div><div class=content><code>cert-chain.pem</code> is Envoy&rsquo;s cert that needs to be presented to the other side. <code>key.pem</code> is Envoy&rsquo;s private key
paired with Envoy&rsquo;s cert in