ween the workloads and the root CA. In this example, it only contains the Istio CA certificate, so <code class="highlighter-rouge">cert-chain.pem</code> is the same as <code class="highlighter-rouge">ca-cert.pem</code>. Note that if your <code class="highlighter-rouge">ca-cert.pem</code> is the same as <code class="highlighter-rouge">root-cert.pem</code>, you can have an empty <code class="highlighter-rouge">cert-chain.pem</code> file.</p><p>Download the example files:</p><div class="language-bash highlight