how to check which certificate is being by server.conf .
I have updated the certificate in the back end but still showing the old one.
Have you restarted splunk after certificate update ?
Just use btool. This will show you which cert is used
In splunk/bin type ./splunk cmd btool server list --debug | grep *.pem
./splunk cmd btool server list --debug | grep *.pem
Please accept the answer if it helped you 🙂 thank you