Different between http_ca.crt file and http.p12

Elastic Stack Elasticsearch
1

When elasticsearch is initially installed it generate 3 files namely

  • http_ca.crt
  • http.p12
  • transport.p12

http_ca.crt seems to be a certificate in PEM format, is this the certificate elasticsearch provide when other component like kibana try to connect to elasticsearch via tls?

then there is another file, http.p12, which i run the command
/usr/share/elasticsearch/jdk/bin/keytool -keystore http.p12 -list
i get output like this :

image
image449×244 15.3 KB

is the http_ca in the picture the private key for http_ca.crt? also what is the other http entry in the picture, what is that for then?