anchor.diff:  
   [source,shell]
   ----
  -bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12
  +./bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12
   ----
   You are prompted for a password. You can enter a password for your
   certificate and key, or you can leave the password blank.
  
positive.code: 
  [source,shell]
  ----
  bin/elasticsearch-certutil ca
  ----
  
  You can configure the cluster to trust all nodes that have a certificate that
  
negative.code: NOTE: The <<config-files-location,{es} configuration directory>> varies
  depending on your {es} installation.
  
  .. On each node, copy the certificate that you created into the `/certs`
  directory. This certificate is typically a single `.p12` (PKCS#12) file, such
  as `elastic-certificates.p12`.
  
  .. If you generated HTTP certificates, copy the `http.p12` file into the
  `certs` directory as well.
  
  .. For each additional Elastic product that you want to configure, copy the
  certificates to the relevant configuration directory.
  