As per https://github.com/elastic/elastic-package/pull/1669#discussion_r1489416945 and https://github.com/elastic/elastic-package/pull/1669#discussion_r1489425185 , check if the refactor is possible - [ ] Generate certificates earlier so we don't need to update policy https://github.com/elastic/elastic-package/pull/1669#discussion_r1489425185 - [x] Review need of PKCS8 conversion https://github.com/elastic/elastic-package/pull/1669#discussion_r1489416945 - Fixed in https://github.com/elastic/elastic-package/pull/1687