ad certificates using an administrator-specified certificate and key, and with an
administrator-specified root certificate.</p><p>A root CA is used by all workloads within a mesh as the root of trust. Each Istio CA uses an intermediate CA
signing key and certificate, signed by the root CA. When multiple Istio CAs exist within a mesh, this establishes a
hierarchy of trust among the CAs.</p><figure style=width:80%><div class=wrapper-with-intrinsic-ratio style=padding-bottom:70.70707070707071%><a data-skipendn