How to create a client certificate and client key for a Service Account on k8s

Question

I am experimenting with service accounts and user accounts.

I am able to create CA / Key for user accounts in order to be able to verify the user through the Server-A