TLS and Mutual Authentication

Docker issues every manager and worker with a client certificate that they use for mutual authentication. It identifies the node, the swarm it's a member of, and whether it's a manager or worker.

Inspecting a client certificate

You can inspect a node’s client certificate on Linux with the following command.