Istio: KVM certificate1 and certificate1_kid format and relation

[joemarg]

Hi,

I'm doing a POC for istio adapter mixer and we want to customize some of the values for /certs and /token flow. I just want to know what are the formats of certificate1 and certificate1_kid in the KVM? Is it PEM format? Also what is the relation of the two certificates?

Thanks in advance.