Generating root certificate... done! Generating intermediate certificate... done! ✔ Root certificate: /home/step/certs/root_ca.crt ✔ Root private key: /home/step/secrets/root_ca_key ✔ Root fingerprint: 17f148d1d44bcdd09915d37f52f2d3d5e33381b7a5addf9def11b31a55112ebd ✔ Intermediate certificate: /home/step/certs/intermediate_ca.crt ✔ Intermediate private key: /home/step/secrets/intermediate_ca_key ✔ Database folder: /home/step/db ✔ Default configuration: /home/step/config/defaults.json ✔ Certificate Authority configuration: /home/step/config/ca.json Your PKI is ready to go. To generate certificates for individual services see 'step help ca'. FEEDBACK 😍 🍻 The step utility is not instrumented for usage statistics. It does not phone home. But your feedback is extremely valuable. Any information you can provide regarding how you’re using `step` helps. Please send us a sentence or two, good or bad at feedback@smallstep.com or join GitHub Discussions https://github.com/smallstep/certificates/discussions and our Discord https://u.step.sm/discord. 👉 Your CA administrative password is: J21hKrrVAJp5X3CENLFZuWlsL2e3T3WFBe1QEDQu 🤫 This will only be displayed once. badger 2026/06/17 07:49:44 INFO: All 0 tables opened in 0s 2026/06/17 07:49:44 Building new tls configuration using step-ca x509 Signer Interface 2026/06/17 07:49:44 Starting Smallstep CA/0.28.4 (linux/amd64) 2026/06/17 07:49:44 Documentation: https://u.step.sm/docs/ca 2026/06/17 07:49:44 Community Discord: https://u.step.sm/discord 2026/06/17 07:49:44 Config file: /home/step/config/ca.json 2026/06/17 07:49:44 The primary server URL is https://localhost:9000 2026/06/17 07:49:44 Root certificates are available at https://localhost:9000/roots.pem 2026/06/17 07:49:44 Additional configured hostnames: 127.0.0.1 2026/06/17 07:49:44 X.509 Root Fingerprint: 17f148d1d44bcdd09915d37f52f2d3d5e33381b7a5addf9def11b31a55112ebd 2026/06/17 07:49:44 Serving HTTPS on :9000 ... 2026/06/17 07:50:03 shutting down ... badger 2026/06/17 07:50:03 INFO: Storing value log head: {Fid:0 Len:30 Offset:1575} badger 2026/06/17 07:50:03 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0 badger 2026/06/17 07:50:03 INFO: LOG Compact 0->1, del 1 tables, add 1 tables, took 7.407084ms badger 2026/06/17 07:50:03 INFO: [Compactor: 173] Compaction for level: 0 DONE badger 2026/06/17 07:50:03 INFO: Force compaction on level 0 done badger 2026/06/17 07:50:04 INFO: All 1 tables opened in 0s badger 2026/06/17 07:50:04 INFO: Replaying file id: 0 at offset: 1605 badger 2026/06/17 07:50:04 INFO: Replay took: 2.451µs 2026/06/17 07:50:04 Building new tls configuration using step-ca x509 Signer Interface 2026/06/17 07:50:04 Starting Smallstep CA/0.28.4 (linux/amd64) 2026/06/17 07:50:04 Documentation: https://u.step.sm/docs/ca 2026/06/17 07:50:04 Community Discord: https://u.step.sm/discord 2026/06/17 07:50:04 Config file: /home/step/config/ca.json 2026/06/17 07:50:04 The primary server URL is https://localhost:9000 2026/06/17 07:50:04 Root certificates are available at https://localhost:9000/roots.pem 2026/06/17 07:50:04 Additional configured hostnames: 127.0.0.1 2026/06/17 07:50:04 X.509 Root Fingerprint: 17f148d1d44bcdd09915d37f52f2d3d5e33381b7a5addf9def11b31a55112ebd 2026/06/17 07:50:04 Serving HTTPS on :9000 ... time="2026-06-17T07:50:15Z" level=info duration="88.535µs" duration-ns=88535 fields.time="2026-06-17T07:50:15Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address="::1" request-id=9966182b-0dd8-41f3-a653-21a5d11015d3 size=16 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id= time="2026-06-17T07:50:15Z" level=info duration="210.03µs" duration-ns=210030 fields.time="2026-06-17T07:50:15Z" method=GET name=ca path="/provisioners?limit=100" protocol=HTTP/2.0 referer= remote-address="::1" request-id=2d947ab3-0bcc-4a9e-8136-ba4dc074826b size=867 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id= time="2026-06-17T07:50:16Z" level=warning duration="16.843µs" duration-ns=16843 fields.time="2026-06-17T07:50:16Z" method=GET name=ca path=/admin/admins protocol=HTTP/2.0 referer= remote-address="::1" request-id=e45f5ed1-d871-43bb-ba2f-e6b185be58bb size=19 status=404 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id= 2026/06/17 07:50:17 shutting down ... badger 2026/06/17 07:50:17 INFO: Storing value log head: {Fid:0 Len:30 Offset:3169} badger 2026/06/17 07:50:17 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0 badger 2026/06/17 07:50:17 INFO: LOG Compact 0->1, del 2 tables, add 1 tables, took 9.248904ms badger 2026/06/17 07:50:17 INFO: [Compactor: 173] Compaction for level: 0 DONE badger 2026/06/17 07:50:17 INFO: Force compaction on level 0 done badger 2026/06/17 07:50:17 INFO: All 1 tables opened in 1ms badger 2026/06/17 07:50:18 INFO: Replaying file id: 0 at offset: 3199 badger 2026/06/17 07:50:18 INFO: Replay took: 3.874µs 2026/06/17 07:50:18 Building new tls configuration using step-ca x509 Signer Interface 2026/06/17 07:50:18 Starting Smallstep CA/0.28.4 (linux/amd64) 2026/06/17 07:50:18 Documentation: https://u.step.sm/docs/ca 2026/06/17 07:50:18 Community Discord: https://u.step.sm/discord 2026/06/17 07:50:18 Config file: /home/step/config/ca.json 2026/06/17 07:50:18 The primary server URL is https://localhost:9000 2026/06/17 07:50:18 Root certificates are available at https://localhost:9000/roots.pem 2026/06/17 07:50:18 Additional configured hostnames: 127.0.0.1 2026/06/17 07:50:18 X.509 Root Fingerprint: 17f148d1d44bcdd09915d37f52f2d3d5e33381b7a5addf9def11b31a55112ebd 2026/06/17 07:50:18 Serving HTTPS on :9000 ... time="2026-06-17T07:50:31Z" level=info duration="219.769µs" duration-ns=219769 fields.time="2026-06-17T07:50:31Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=9bc28be1-120f-4731-b6e1-84a8731d9ad0 size=16 status=200 user-agent=curl/7.88.1 user-id= time="2026-06-17T07:50:31Z" level=info duration="47.941µs" duration-ns=47941 fields.time="2026-06-17T07:50:31Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=ffb5a37e-702f-4a78-a08c-3d0eb291b935 size=16 status=200 user-agent=curl/7.88.1 user-id=