How to get ca.crt from Keycloak Operator

I used Keycloak Operator to setup KeyCloak and run on OpenShift, now I want to get Keycloak root cca certificate (ca.crt), in my test case, I need add this public certificate to my client trutstore, then my client can connect Keycloak. does anybody know which secret stores that?