 <code>cert-chain.pem</code>. <code>root-cert.pem</code> is the root cert to verify the peer&rsquo;s cert.
In this example, we only have one Citadel in a cluster, so all Envoys have the same <code>root-cert.pem</code>.</div></aside></div><p>Use the <code>openssl</code> tool to check if certificate is valid (current time should be in between <code>Not Before</code> and <code>Not After</code>)</p><pre><code class=language-bash data-expandlinks=true>$ kubectl exec $(kubectl get pod -l app=httpbin -o jsonpath={