SDS config for the SSL certs

Security
1

Hi, I was trying out the SDS demo on the page

I was trying to understand where are the certs issued by the ISTIO are loaded into the envoy?

Is there a way that I can verify the envoy is using the certs provided by Istio?

I mean where can I see the mTLS listener config in envoy and how does the ISTIO configure it?

I am looking for the SSL_context config too, I mean where does envoy look for the certs to be used for mTLS.

Please, if anyone can point me to the config that would be great.

Thanks