ode class=language-bash data-expandlinks=true data-repo=istio>$ curl https://letsencrypt.org/certs/trustid-x3-root.pem --output trusted.crt</code></pre></li><li><p>Create a Kubernetes secret to be used by the ALB to establish mutual TLS connection.</p><div><aside class="callout warning"><div class=type><svg class="large-icon"><use xlink:href="/v1.26/img/icons.svg#callout-warning"/></svg></div><div class=content>The certificates provided by IKS expire every 90 days and are automatically renewed by
IKS 37 day