We have built an Elasticsearch cluster and is up and running. We have few java clients sending data to the cluster using the Elastic cluster certificate. The client fail to use the certificate only from one specific cluster and is failing with the error.

PKIX path validation failed: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors

We are now trying to regenerate the CA certificate for the cluster. Is this possible using the elasticsearch-certutil utility?

Thank You
Jpm