monitor_ssl_identity
The digital certificate used for the Server Health and Metrics HTTPS listen in PEM, DER, or PKCS#12 format. You can specify the path to a file that contains the certificate in one of the supported formats.
monitor_ssl_identity = certificate
If none of monitor_ssl_identity, monitor_ssl_key, monitor_ssl_trusted, and monitor_ssl_password are set, the identity file configured for the server’s TLS listen (ssl_server_identity) is used in its place. If that identity file is also not specified, the server will fail to start up.
PEM, PKCS#12 formats allow the digital certificate to include the private key. If these formats are used and the private key is part of the digital certificate, then setting monitor_ssl_key is optional.
For example:
monitor_ssl_identity = certs/server.cert.pem