Gateway not use ca.crt in cert-manager secret request

Hello, why doesn’t istio add ca.crt from secret to gateway?
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
name: jenkins-gateway
namespace: jenkins
spec:
selector:
istio: ingressgateway
servers:

  • port:
    number: 80
    name: http
    protocol: HTTP
    hosts:
    • “192.168.137.3”
  • port:
    number: 443
    name: https
    protocol: HTTPS
    hosts:
    • “*”
      tls:
      mode: SIMPLE
      credentialName: jenkins-alpha-local-tls

jenkins-alpha-local-tls - secret created in secret-manager - returned vault crt
I checked the secret - vault signed the certificate in tls.crt sent the certificate and int , and in ca.crt - ca
but ca.crt not us gateway:
image