Check:
You will encounter clientca.pem in:
Instead of asking users to manually download, host the clientca.pem on an internal artifact repository (e.g., Nexus, Artifactory) with versioning. clientca.pem download
# Step 1: Generate a private key for your Client CA
openssl genrsa -out clientca.key 2048