# Different between http\_ca.crt file and http.p12

**URL:** <https://discuss.elastic.co/t/different-between-http-ca-crt-file-and-http-p12/370769>\
**Category:** Elasticsearch\
**Created:** [November 19, 2024, 2:15pm UTC](https://discuss.elastic.co/t/different-between-http-ca-crt-file-and-http-p12/370769 "2024-11-19T14:15:41Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![jack\_a](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jack_a/32/133082_2.png) [@jack\_a](https://discuss.elastic.co/u/jack_a)\
**Post date:** [November 19, 2024, 2:15pm UTC](https://discuss.elastic.co/t/different-between-http-ca-crt-file-and-http-p12/370769/1 "2024-11-19T14:15:41Z")

</div>

When elasticsearch is initially installed it generate 3 files namely

- http\_ca.crt
- http.p12
- transport.p12

http\_ca.crt seems to be a certificate in PEM format, is this the certificate elasticsearch provide when other component like kibana try to connect to elasticsearch via tls?

then there is another file, http.p12, which i run the command  
`/usr/share/elasticsearch/jdk/bin/keytool -keystore http.p12 -list`  
i get output like this :

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/a/da23e36cb43c0634a156d34fb9c80e3a90609c14.png)

is the http\_ca in the picture the private key for http\_ca.crt? also what is the other http entry in the picture, what is that for then?