named as istio.*). In this example, <code>istio.default</code>. The Istio CA will issue new certificates for the workloads.<pre><code class="language-bash">kubectl delete secret istio.default
</code></pre><p>Note that if you are using different certificate/key file or secret names, you need to change corresponding arguments in <code>istio-ca-plugin-certs.yaml</code>.</p></li></ol><h2 id="verifying-the-new-certificates">Verifying the new certificates</h2><p>In this section, we verify that the new workload ce