I need to create AWS IAM create-open-id-connect-provider for an existing Kubernetes clusters built with kops(or kube-adm basically non EKS clusters). API requires 2 params ISSUER_URL and ROOT_CA_FINGERPRINT. From this documentation (more detailed info in this Blog but for EKS) I need to find cluster's public key for S3 bucket and then Root CA fingerprint so that AWS IAM can verify the JWT token of Kubernetes Service Account was sent by cluster.

Where can I find this public key and Certificate?