pod <code>ratings-v1-734492171-rnr5l</code> as an example, and verify the mounted certificates. Run the following commands to retrieve the certificates mounted on the proxy:</p><pre><code class="language-bash">kubectl exec -it ratings-v1-734492171-rnr5l -c istio-proxy -- /bin/cat /etc/certs/root-cert.pem &gt; /tmp/pod-root-cert.pem
</code></pre><p>The file <code>/tmp/pod-root-cert.pem</code> should contain the root certificate specified by the operator.</p><pre><code class="language-bash">kubectl exec -it r