Unable to load elasticsearch certificate

Elastic Stack Elasticsearch
4

Hello @TimV ,
Thank you so much for your reply.

Pfb data:

# ======================== Elasticsearch Configuration =========================
#
# NOTE: Elasticsearch comes with reasonable defaults for most settings.
#       Before you set out to tweak and tune the configuration, make sure you
#       understand what are you trying to accomplish and the consequences.
#
# The primary way of configuring a node is via this file. This template lists
# the most important settings you may want to configure for a production cluster.
#
# Please consult the documentation for further information on configuration options:
# https://www.elastic.co/guide/en/elasticsearch/reference/index.html
#
# ---------------------------------- Cluster -----------------------------------

cluster.name: abc-elk-dev
# ------------------------------------ Node ------------------------------------

node.name: abc-dev-2

# ----------------------------------- Paths ------------------------------------
path.logs: /var/log/elasticsearch/elk.log1

# ---------------------------------- Network -----------------------------------

http.port: 9200

# --------------------------------- Discovery ----------------------------------

discovery.zen.ping.unicast.hosts: ["pldevelk03.abc.net", "pldevelk04.abc.net"]

discovery.zen.minimum_master_nodes: 2

##-----------------Current settings --------------------------
xpack.security.enabled: true
xpack:
  security:
    authc:
      realms:
        active_directory:
          canon_ad:
            order: 0
            domain_name: abc.net
            url: ldap://abc.net:389
xpack.security.authc.realms.native.native1.order: 1
            
            
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate 
xpack.security.transport.ssl.key: /etc/elasticsearch/certificates/private-key.pem
xpack.security.transport.ssl.certificate: /etc/elasticsearch/certificates/lk.pem
xpack.security.transport.ssl.certificate_authorities:
- /etc/elasticsearch/certificates/DigiCertGlobalRootCA.crt.pem
- /etc/elasticsearch/certificates/DigiCertTLSRSASHA2562020CA1-1.crt.pem

xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.verification_mode: certificate
xpack.security.http.ssl.key:  /etc/elasticsearch/certificates/private-key.pem
xpack.security.http.ssl.certificate: /etc/elasticsearch/certificates/lk.pem
xpack.security.http.ssl.certificate_authorities:
- /etc/elasticsearch/certificates/DigiCertGlobalRootCA.crt.pem
- /etc/elasticsearch/certificates/DigiCertTLSRSASHA2562020CA1-1.crt.pem

http.max_content_length: 2147483647b

xpack.monitoring.enabled: true
xpack.monitoring.collection.enabled: true
xpack.monitoring.collection.interval: 60s
xpack.monitoring.history.duration: 7d
xpack.monitoring.elasticsearch.collection.enabled: true



xpack.notification.email.account:
    outlook_account:
        profile: outlook
        smtp:
            auth: true
            starttls.enable: true
            host: smtpnpd.mk.net 
            port: 25
            user: abc@nprd.support.pp.com

reindex.remote.whitelist: 172.24.217.21:9204