# sudo -u zabbix head -n 1 /etc/mosquitto/certs/ca.crt
-----BEGIN CERTIFICATE-----

# namei -om /etc/mosquitto/certs/ca.crt
f: /etc/mosquitto/certs/ca.crt
 dr-xr-xr-x root root /
 drwxr-xr-x root root etc
 drwxr-xr-x root root mosquitto
 drwxr-xr-x root root certs
 -rw-r--r-- root root ca.crt


# openssl x509 -inform PEM -in /etc/mosquitto/certs/ca.crt -text -noout
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3e:47:28:ec:c6:73:df:19:0d:dd:00:9a:4c:6d:2a:6c:68:c0:99
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN = MyRootCA
        Validity
            Not Before: Jan 15 07:34:26 2026 GMT
            Not After : Jan 13 07:34:26 2036 GMT
        Subject: CN = MyRootCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:85:1e:a6:7d:46:c8:1b:94:5a:28:8f:04:
                    7b:b8:89:8a:ca:fb:f0:c2:52:25:ad:b4:66:64:37:
                    fd:ea:8c:97:7d:c6:3b:3c:af:8c:b7:72:72:58:1e:
                    53:2e:2d:a4:9e:12:1b:43:90:10:14:a8:be:18:22:
                    8d:03:c4:ee:27:66:50:86:0b:0c:1a:91:a4:8d:8b:
                    7e:d3:fe:72:d3:d3:32:46:a5:59:32:ed:ba:70:0e:
                    60:85:b4:39:b7:f8:78:c0:47:7f:5a:1f:5d:8c:65:
                    91:87:3a:e9:04:00:6c:46:aa:5b:07:6c:31:14:41:
                    0b:91:4d:63:78:13:79:4e:d5:75:cf:e6:d3:ec:1f:
                    90:16:09:dd:61:c1:ea:f3:0b:ca:26:f2:70:9e:76:
                    47:c0:df:98:f7:17:84:d9:f6:2a:2d:a5:4e:83:ca:
                    18:14:5f:97:b3:f0:49:ca:2a:ea:1e:2a:2a:10:3c:
                    d2:93:5c:78:bc:66:1e:09:c2:fe:dd:fd:b0:c4:3f:
                    e9:11:c4:fe:ee:bb:9c:4e:2f:45:9c:b6:cb:5c:24:
                    8d:1b:8c:4a:83:b3:49:12:a3:74:18:86:2f:bf:3e:
                    9c:4e:27:28:50:da:74:a6:95:2a:50:81:94:5b:7a:
                    61:2f:a5:ff:6f:da:40:2c:cd:0c:15:69:ee:22:d8:
                    57:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D5:20:84:1A:53:08:C2:7A:75:56:AB:39:19:A2:11:37:54:5D:88:DC
            X509v3 Authority Key Identifier: 
                keyid:D5:20:84:1A:53:08:C2:7A:75:56:AB:39:19:A2:11:37:54:5D:88:DC

            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         ac:1b:c8:21:c7:53:11:5b:90:28:72:de:cd:84:ba:8d:6a:ce:
         05:18:86:9c:bd:77:1a:13:70:48:1a:14:8e:c5:c4:9a:99:59:
         36:4f:aa:24:fe:07:0a:54:a8:92:75:3e:96:23:89:58:a7:5b:
         2f:43:bb:b1:4e:fb:ec:a7:e0:60:a6:f7:10:e5:8a:46:3a:60:
         08:d2:a1:79:a9:9f:37:47:a6:5a:21:8c:82:e4:fe:e8:de:f3:
         84:2d:79:0c:e0:8a:d1:aa:2a:7d:c1:e3:70:e6:1a:eb:cf:40:
         9f:3c:3f:d9:59:72:be:3a:7c:bf:67:9e:c1:e0:82:4a:1e:13:
         c5:61:cf:36:92:10:69:2d:a7:d0:62:57:e5:07:81:a7:db:ed:
         04:ab:92:5d:92:3f:93:7f:6f:b3:a5:ba:9a:f8:e1:4e:68:f2:
         17:b8:96:7d:9e:03:10:96:93:5a:c7:74:09:4c:8f:c3:e5:1c:
         df:86:5f:74:90:bc:fe:d1:c5:98:8e:f1:db:2b:bb:9f:31:11:
         8b:08:63:5b:43:b1:b0:2c:52:18:ec:b8:20:39:94:70:27:ef:
         f2:a3:57:ed:16:1a:1d:fc:d9:a6:69:0d:32:95:1a:f0:a2:f7:
         41:d9:45:4b:38:70:c3:e7:a1:93:36:be:70:8f:e2:13:1d:68:
         12:1d:63:9e