tags:

views:

41

answers:

0

What is the MD5 Fingerprint field before the PEM data of a CA cert in ca-bundle.crt used for by consuming applications? When I enter the hash incorrectly, I find that I'm still able to use openssl to start a TLS session with a server whose cert is signed by that CA.

Example:

American Express CA

MD5 Fingerprint: 1C:D5:8E:82:BE:70:55:8E:39:61:DF:AD:51:DB:6B:A0 PEM Data: -----BEGIN CERTIFICATE----- MIICkDCCAfkCAgCNMA0GCSqGSIb3DQEBBAUAMIGPMQswCQYDVQQGEwJVUzEnMCUG ...