neil@nj-ubuntu:~/calico$ juju ssh etcd-local-proxy/0
Welcome to Ubuntu 16.04 LTS (GNU/Linux 4.4.0-28-generic x86_64)
[...]

ubuntu@ip-172-31-48-169:~$ etcdctl ls /
Error:  client: etcd cluster is unavailable or misconfigured
error #0: x509: certificate signed by unknown authority

ubuntu@ip-172-31-48-169:~$

ubuntu@ip-172-31-48-169:~$ openssl x509 -in /tmp/etcd_cert -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5e:e4:6a:d7:35:9e:8b:d4:c4:aa:e1:c5:87:8c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54.164.27.251
        Validity
            Not Before: Jul  1 14:58:27 2016 GMT
            Not After : Jun 29 14:58:27 2026 GMT
        Subject: CN=client
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f7:33:b6:60:15:8b:0f:0b:00:2f:6b:23:aa:ff:
                    25:62:b9:25:ee:33:d9:4d:83:cd:0f:66:4d:73:1d:
                    3e:b7:3e:c4:f2:27:05:96:3c:62:68:64:a1:b5:32:
                    26:bc:5a:f7:0c:57:74:88:75:1d:c6:43:ca:5c:7c:
                    fb:13:c5:4d:52:2d:88:b4:6c:71:d2:48:5d:3e:e9:
                    1f:19:22:7c:2b:4e:60:0e:52:1b:6f:d7:72:1c:70:
                    1c:32:e0:f8:b6:cb:35:28:0d:e8:b9:51:8d:a1:bc:
                    4d:63:c7:47:97:fe:5f:c6:bf:70:78:fd:10:10:75:
                    93:9f:50:a4:1f:8a:96:9a:ca:a8:1b:6d:87:bf:f1:
                    86:58:6b:dc:2c:e2:d1:9b:60:b6:fc:c6:e5:fc:3c:
                    e7:be:f4:30:29:1e:a8:5c:32:3c:58:d6:45:11:9a:
                    e0:69:1c:71:b2:49:94:01:20:23:d3:79:64:14:0a:
                    f1:04:76:27:d8:b6:3f:d9:a8:ea:57:38:81:d2:38:
                    8c:2b:4a:07:fd:64:ac:2d:ed:ff:35:06:23:55:f8:
                    45:65:b7:41:fe:64:27:2a:3e:24:99:a6:f8:56:75:
                    00:55:c4:5c:03:7e:ee:be:8e:9b:f3:90:6c:44:e1:
                    41:a9:d6:32:51:51:35:3b:72:a3:9d:4a:1a:3d:f4:
                    3c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints:
                CA:FALSE
            X509v3 Subject Key Identifier:
                27:6B:B4:04:97:B1:17:B1:3E:81:C2:D3:96:AA:7B:77:1B:33:F4:E2
            X509v3 Authority Key Identifier:
                keyid:C8:48:C0:05:F3:06:A1:16:03:83:A9:54:8A:EA:E3:D4:BD:10:D3:9F
                DirName:/CN=54.164.27.251
                serial:CB:29:62:0E:80:AE:99:FD

            X509v3 Extended Key Usage:
                TLS Web Client Authentication
            X509v3 Key Usage:
                Digital Signature
            X509v3 Subject Alternative Name:
                IP Address:54.164.27.251, IP Address:172.31.51.7, DNS:ip-172-31-51-7
    Signature Algorithm: sha256WithRSAEncryption
         31:63:9a:55:bf:5a:e7:f5:65:b6:e9:c7:ce:50:c2:0d:86:7a:
         43:60:18:61:ed:0e:d2:6a:03:bb:e7:72:93:5a:a6:22:27:2b:
         25:92:8e:b8:f6:36:60:67:04:75:26:1f:53:bd:5e:bd:34:d3:
         09:00:96:2f:6a:8f:1a:f2:61:7d:66:86:b8:d8:16:9a:ea:b4:
         91:2d:36:5a:16:c4:1d:78:3f:2e:d7:40:d4:86:0e:5d:48:0c:
         7a:16:6d:61:be:64:fc:66:2a:3a:bb:cd:b2:fd:dc:49:56:79:
         71:02:fb:ec:1e:21:6d:b3:1c:7f:f6:db:f9:4d:08:c4:74:c4:
         44:a6:e6:43:c1:df:64:3e:d5:88:6d:08:8e:2f:b9:5e:5f:a5:
         ed:1c:57:67:4d:50:8e:fb:c2:35:17:c5:67:a3:d8:57:26:02:
         c5:35:53:65:43:30:b4:e6:e6:71:ca:65:84:70:8e:62:3d:76:
         90:f6:73:ea:b6:a7:63:5f:21:0a:a1:85:00:d5:12:68:1a:8c:
         44:5d:1b:49:1b:89:b3:6c:e1:aa:27:7f:85:74:5b:13:72:f1:
         fb:9e:45:c0:2c:05:a9:2d:45:3c:3e:f5:51:e5:8d:de:fd:74:
         3a:fc:e6:1d:34:91:28:1b:89:35:d3:72:5e:26:f9:62:09:03:
         05:18:ac:f1
-----BEGIN CERTIFICATE-----
MIIDdDCCAlygAwIBAgIQRF7katc1novUxKrhxYeMjzANBgkqhkiG9w0BAQsFADAY
MRYwFAYDVQQDDA01NC4xNjQuMjcuMjUxMB4XDTE2MDcwMTE0NTgyN1oXDTI2MDYy
OTE0NTgyN1owETEPMA0GA1UEAwwGY2xpZW50MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA9zO2YBWLDwsAL2sjqv8lYrkl7jPZTYPND2ZNcx0+tz7E8icF
ljxiaGShtTImvFr3DFd0iHUdxkPKXHz7E8VNUi2ItGxx0khdPukfGSJ8K05gDlIb
b9dyHHAcMuD4tss1KA3ouVGNobxNY8dHl/5fxr9weP0QEHWTn1CkH4qWmsqoG22H
v/GGWGvcLOLRm2C2/Mbl/DznvvQwKR6oXDI8WNZFEZrgaRxxskmUASAj03lkFArx
BHYn2LY/2ajqVziB0jiMK0oH/WSsLe3/NQYjVfhFZbdB/mQnKj4kmab4VnUAVcRc
A37uvo6b85BsROFBqdYyUVE1O3KjnUoaPfQ8hwIDAQABo4HAMIG9MAkGA1UdEwQC
MAAwHQYDVR0OBBYEFCdrtASXsRexPoHC05aqe3cbM/TiMEgGA1UdIwRBMD+AFMhI
wAXzBqEWA4OpVIrq49S9ENOfoRykGjAYMRYwFAYDVQQDDA01NC4xNjQuMjcuMjUx
ggkAyyliDoCumf0wEwYDVR0lBAwwCgYIKwYBBQUHAwIwCwYDVR0PBAQDAgeAMCUG
A1UdEQQeMByHBDakG/uHBKwfMweCDmlwLTE3Mi0zMS01MS03MA0GCSqGSIb3DQEB
CwUAA4IBAQAxY5pVv1rn9WW26cfOUMINhnpDYBhh7Q7SagO753KTWqYiJyslko64
9jZgZwR1Jh9TvV69NNMJAJYvao8a8mF9Zoa42Baa6rSRLTZaFsQdeD8u10DUhg5d
SAx6Fm1hvmT8Zio6u82y/dxJVnlxAvvsHiFtsxx/9tv5TQjEdMREpuZDwd9kPtWI
bQiOL7leX6XtHFdnTVCO+8I1F8Vno9hXJgLFNVNlQzC05uZxymWEcI5iPXaQ9nPq
tqdjXyEKoYUA1RJoGoxEXRtJG4mzbOGqJ3+FdFsTcvH7nkXALAWpLUU8PvVR5Y3e
/XQ6/OYdNJEoG4k103JeJvliCQMFGKzx
-----END CERTIFICATE-----