What is the MD5 Fingerprint field before the PEM data of a CA cert in ca-bundle.crt used for by consuming applications? When I enter the hash incorrectly, I find that I'm still able to use openssl to start a TLS session with a server whose cert is signed by that CA.
Example:
American Express CA
MD5 Fingerprint: 1C:D5:8E:82:BE:70:55:8E:39:61:DF:AD:51:DB:6B:A0 PEM Data: -----BEGIN CERTIFICATE----- MIICkDCCAfkCAgCNMA0GCSqGSIb3DQEBBAUAMIGPMQswCQYDVQQGEwJVUzEnMCUG ...