Certificate Authority Portal

Read-only. Fetched live, just now, from 192.168.1.119:8100

Root certificate fingerprint (SHA-256)

B3:64:07:22:CE:45:DD:2C:FD:8D:56:75:82:3E:93:3A:88:41:4D:0D:2C:7E:8F:79:88:A0:FD:63:32:CF:53:8C

Before trusting this certificate, confirm the fingerprint above matches what you were told out of band (by whoever runs this CA) -- the same trust-on-first-use check SSH host keys already use. A copy of a root certificate grants no capability by itself; it only lets your own software verify signatures made by this CA's private key, which never leaves it.

Add to trust store — macOS

security add-trusted-cert -d -r trustRoot \
  -k /Library/Keychains/System.keychain root.pem

Or double-click the downloaded file in Keychain Access, then mark it “Always Trust” for SSL -- a plain double-click import alone does not set that.

Add to trust store — Windows

certutil -addstore "ROOT" root.pem

Or double-click the downloaded file and use the Certificate Import Wizard, placing it in “Trusted Root Certification Authorities”.

Add to trust store — Linux

sudo cp root.pem /usr/local/share/ca-certificates/root.crt
sudo update-ca-certificates

Exact paths/commands vary by distribution -- this is the Debian/Ubuntu family's own convention.

Informational only -- no certificate issuance happens on this page. Ask whoever runs this CA for a Personal Access Token to request your own certificate.