X.509 issuer

https://cert-manager.io/docs/configuration/issuers/

 kubectl get secret your-tls -o jsonpath='{.data.tls\.crt}' | base64 --decode | openssl x509 -issuer -noout

kubectl exec keycloak-0 -- keytool -printcert -sslserver yourdomain:443 | grep -i issuer

In order to begin issuing certificates, you will need to set up a ClusterIssuer
or Issuer resource (for example, by creating a 'letsencrypt-staging' issuer).

issuer:

           X509v3 Basic Constraints: critical
               CA:TRUE

• OpenID issuer
• openssl x509 -text
• ca-certificates

See also

• helm install cert-manager, Ingress-shim, helm uninstall cert-manager
• cert-manager, cert-manager-controller, ingress-shim, kind: Certificate, kind: ClusterIssuer, Kind: CertificateSigningRequest, kind: Issuer, kubectl [ get | describe ] certificates, cmctl, kubectl get issuer, kubectl get csr, IngressShim, annotations, Kyverno, CA Injector
• openssl x509[ -inform | -text | -dates | -req | -subject | -issuer | --help]