I identified a problem with access control with viewCert and viewCertFull
commands. Access control for these looks like (see under RBAC directory):
However, this prevents these commands from displaying the CA certificate.
To fix this problem, I removed the CERTIFICATE_SERIAL keyword, so now both