The root CA (Certificate Authority) certificate will be used to sign the leaf AMT certificate, and the root CA certificate hash will be imported into each client's AMT. Certificate: Data: Version: 3 (0x2) Serial Number: <redacted> Signature Algorithm: sha256WithRSAEncryption Issuer: C = <country>, ST = <state>, L = <city>, O = <organisation>, OU = Custom AMT Root CA, CN = <server FQDN>, emailAddress = <email address> Validity Not Before: <creation date> Not After : <creation date + 3650 days> Subject: C = <country>, ST = <state>, L = <city>, O = <organisation>, OU = Custom AMT Root CA, CN = <server FQDN>, emailAddress = <email address> Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: <redacted> Exponent: 65537 (0x10001) X509v3 extensions: X509v3…