Generating root certificate... done!
Generating intermediate certificate... done!

✔ Root certificate: /home/step/certs/root_ca.crt
✔ Root private key: /home/step/secrets/root_ca_key
✔ Root fingerprint: bc46dee7befdf0acad5def53724b9fbfe28574c5a4fe8b4dd630ae54b08cbcb8
✔ Intermediate certificate: /home/step/certs/intermediate_ca.crt
✔ Intermediate private key: /home/step/secrets/intermediate_ca_key
✔ Database folder: /home/step/db
✔ Default configuration: /home/step/config/defaults.json
✔ Certificate Authority configuration: /home/step/config/ca.json

Your PKI is ready to go. To generate certificates for individual services see 'step help ca'.

FEEDBACK 😍 🍻
  The step utility is not instrumented for usage statistics. It does not phone
  home. But your feedback is extremely valuable. Any information you can provide
  regarding how you’re using `step` helps. Please send us a sentence or two,
  good or bad at feedback@smallstep.com or join GitHub Discussions
  https://github.com/smallstep/certificates/discussions and our Discord 
  https://u.step.sm/discord.

👉 Your CA administrative password is: SWcxVQiPZpegwdwGaulQVX2UbFuhoze1g25LtYXg
🤫 This will only be displayed once.
badger 2026/06/02 06:46:53 INFO: All 0 tables opened in 0s
2026/06/02 06:46:53 Building new tls configuration using step-ca x509 Signer Interface
2026/06/02 06:46:53 Starting Smallstep CA/0.28.4 (linux/amd64)
2026/06/02 06:46:53 Documentation: https://u.step.sm/docs/ca
2026/06/02 06:46:53 Community Discord: https://u.step.sm/discord
2026/06/02 06:46:53 Config file: /home/step/config/ca.json
2026/06/02 06:46:53 The primary server URL is https://localhost:9000
2026/06/02 06:46:53 Root certificates are available at https://localhost:9000/roots.pem
2026/06/02 06:46:53 Additional configured hostnames: 127.0.0.1
2026/06/02 06:46:53 X.509 Root Fingerprint: bc46dee7befdf0acad5def53724b9fbfe28574c5a4fe8b4dd630ae54b08cbcb8
2026/06/02 06:46:53 Serving HTTPS on :9000 ...
2026/06/02 06:47:13 shutting down ...
badger 2026/06/02 06:47:13 INFO: Storing value log head: {Fid:0 Len:30 Offset:1575}
badger 2026/06/02 06:47:13 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0
badger 2026/06/02 06:47:13 INFO: LOG Compact 0->1, del 1 tables, add 1 tables, took 10.795356ms
badger 2026/06/02 06:47:13 INFO: [Compactor: 173] Compaction for level: 0 DONE
badger 2026/06/02 06:47:13 INFO: Force compaction on level 0 done
badger 2026/06/02 06:47:14 INFO: All 1 tables opened in 3ms
badger 2026/06/02 06:47:14 INFO: Replaying file id: 0 at offset: 1605
badger 2026/06/02 06:47:14 INFO: Replay took: 31.26µs
2026/06/02 06:47:14 Building new tls configuration using step-ca x509 Signer Interface
2026/06/02 06:47:14 Starting Smallstep CA/0.28.4 (linux/amd64)
2026/06/02 06:47:14 Documentation: https://u.step.sm/docs/ca
2026/06/02 06:47:14 Community Discord: https://u.step.sm/discord
2026/06/02 06:47:14 Config file: /home/step/config/ca.json
2026/06/02 06:47:14 The primary server URL is https://localhost:9000
2026/06/02 06:47:14 Root certificates are available at https://localhost:9000/roots.pem
2026/06/02 06:47:14 Additional configured hostnames: 127.0.0.1
2026/06/02 06:47:14 X.509 Root Fingerprint: bc46dee7befdf0acad5def53724b9fbfe28574c5a4fe8b4dd630ae54b08cbcb8
2026/06/02 06:47:14 Serving HTTPS on :9000 ...
time="2026-06-02T06:47:25Z" level=info duration="122.632µs" duration-ns=122632 fields.time="2026-06-02T06:47:25Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address="::1" request-id=4a21b27a-96c7-4b77-9677-9dbc4517b3b3 size=16 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id=
time="2026-06-02T06:47:25Z" level=info duration="439.006µs" duration-ns=439006 fields.time="2026-06-02T06:47:25Z" method=GET name=ca path="/provisioners?limit=100" protocol=HTTP/2.0 referer= remote-address="::1" request-id=58aac822-bd89-43b2-b7c2-c9f550df825c size=867 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id=
time="2026-06-02T06:47:26Z" level=warning duration="25.09µs" duration-ns=25090 fields.time="2026-06-02T06:47:26Z" method=GET name=ca path=/admin/admins protocol=HTTP/2.0 referer= remote-address="::1" request-id=9cb1a8c7-f92e-4db1-8a06-315af014e120 size=19 status=404 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id=
2026/06/02 06:47:26 shutting down ...
badger 2026/06/02 06:47:26 INFO: Storing value log head: {Fid:0 Len:30 Offset:3169}
badger 2026/06/02 06:47:26 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0
badger 2026/06/02 06:47:26 INFO: LOG Compact 0->1, del 2 tables, add 1 tables, took 9.572405ms
badger 2026/06/02 06:47:26 INFO: [Compactor: 173] Compaction for level: 0 DONE
badger 2026/06/02 06:47:26 INFO: Force compaction on level 0 done
badger 2026/06/02 06:47:27 INFO: All 1 tables opened in 0s
badger 2026/06/02 06:47:27 INFO: Replaying file id: 0 at offset: 3199
badger 2026/06/02 06:47:27 INFO: Replay took: 4.972µs
2026/06/02 06:47:28 Building new tls configuration using step-ca x509 Signer Interface
2026/06/02 06:47:28 Starting Smallstep CA/0.28.4 (linux/amd64)
2026/06/02 06:47:28 Documentation: https://u.step.sm/docs/ca
2026/06/02 06:47:28 Community Discord: https://u.step.sm/discord
2026/06/02 06:47:28 Config file: /home/step/config/ca.json
2026/06/02 06:47:28 The primary server URL is https://localhost:9000
2026/06/02 06:47:28 Root certificates are available at https://localhost:9000/roots.pem
2026/06/02 06:47:28 Additional configured hostnames: 127.0.0.1
2026/06/02 06:47:28 X.509 Root Fingerprint: bc46dee7befdf0acad5def53724b9fbfe28574c5a4fe8b4dd630ae54b08cbcb8
2026/06/02 06:47:28 Serving HTTPS on :9000 ...
time="2026-06-02T06:47:42Z" level=info duration="291.657µs" duration-ns=291657 fields.time="2026-06-02T06:47:42Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=f821f86a-6e4a-4d36-96aa-0c20e22d05bc size=16 status=200 user-agent=curl/7.88.1 user-id=
time="2026-06-02T06:47:42Z" level=info duration="73.646µs" duration-ns=73646 fields.time="2026-06-02T06:47:42Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=8822b091-8480-4f15-8513-d55545cb5cfb size=16 status=200 user-agent=curl/7.88.1 user-id=