.org>Let&rsquo;s Encrypt</a> certificate, which is the
issuer of the certificates provided by IKS. You specify this certificate as the certificate of a certificate
authority to trust, for both the ALB and the Istio ingress gateway.</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ curl https://letsencrypt.org/certs/trustid-x3-root.pem --output trusted.crt
</code></pre></li><li><p>Create a Kubernetes secret to be used by the ALB to establish mutual TLS connection.</p><div><aside class