Generating root certificate... done! Generating intermediate certificate... done! ✔ Root certificate: /home/step/certs/root_ca.crt ✔ Root private key: /home/step/secrets/root_ca_key ✔ Root fingerprint: d89cac95a315def64cbd1553b0d1d341f647a8f62f21460dcb49f7e73bd4ae46 ✔ Intermediate certificate: /home/step/certs/intermediate_ca.crt ✔ Intermediate private key: /home/step/secrets/intermediate_ca_key ✔ Database folder: /home/step/db ✔ Default configuration: /home/step/config/defaults.json ✔ Certificate Authority configuration: /home/step/config/ca.json Your PKI is ready to go. To generate certificates for individual services see 'step help ca'. FEEDBACK 😍 🍻 The step utility is not instrumented for usage statistics. It does not phone home. But your feedback is extremely valuable. Any information you can provide regarding how you’re using `step` helps. Please send us a sentence or two, good or bad at feedback@smallstep.com or join GitHub Discussions https://github.com/smallstep/certificates/discussions and our Discord https://u.step.sm/discord. 👉 Your CA administrative password is: 9tiYCOgN574pplqDF9mpOGhz41UOUxNzztJl7TWr 🤫 This will only be displayed once. badger 2026/06/22 12:06:15 INFO: All 0 tables opened in 0s 2026/06/22 12:06:15 Building new tls configuration using step-ca x509 Signer Interface 2026/06/22 12:06:15 Starting Smallstep CA/0.28.4 (linux/amd64) 2026/06/22 12:06:15 Documentation: https://u.step.sm/docs/ca 2026/06/22 12:06:15 Community Discord: https://u.step.sm/discord 2026/06/22 12:06:15 Config file: /home/step/config/ca.json 2026/06/22 12:06:15 The primary server URL is https://localhost:9000 2026/06/22 12:06:15 Root certificates are available at https://localhost:9000/roots.pem 2026/06/22 12:06:15 Additional configured hostnames: 127.0.0.1 2026/06/22 12:06:15 X.509 Root Fingerprint: d89cac95a315def64cbd1553b0d1d341f647a8f62f21460dcb49f7e73bd4ae46 2026/06/22 12:06:15 Serving HTTPS on :9000 ... 2026/06/22 12:06:35 shutting down ... badger 2026/06/22 12:06:35 INFO: Storing value log head: {Fid:0 Len:30 Offset:1575} badger 2026/06/22 12:06:35 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0 badger 2026/06/22 12:06:35 INFO: LOG Compact 0->1, del 1 tables, add 1 tables, took 10.70628ms badger 2026/06/22 12:06:35 INFO: [Compactor: 173] Compaction for level: 0 DONE badger 2026/06/22 12:06:35 INFO: Force compaction on level 0 done badger 2026/06/22 12:06:35 INFO: All 1 tables opened in 1ms badger 2026/06/22 12:06:35 INFO: Replaying file id: 0 at offset: 1605 badger 2026/06/22 12:06:35 INFO: Replay took: 2.276µs 2026/06/22 12:06:35 Building new tls configuration using step-ca x509 Signer Interface 2026/06/22 12:06:35 Starting Smallstep CA/0.28.4 (linux/amd64) 2026/06/22 12:06:35 Documentation: https://u.step.sm/docs/ca 2026/06/22 12:06:35 Community Discord: https://u.step.sm/discord 2026/06/22 12:06:35 Config file: /home/step/config/ca.json 2026/06/22 12:06:35 The primary server URL is https://localhost:9000 2026/06/22 12:06:35 Root certificates are available at https://localhost:9000/roots.pem 2026/06/22 12:06:35 Additional configured hostnames: 127.0.0.1 2026/06/22 12:06:35 X.509 Root Fingerprint: d89cac95a315def64cbd1553b0d1d341f647a8f62f21460dcb49f7e73bd4ae46 2026/06/22 12:06:35 Serving HTTPS on :9000 ... time="2026-06-22T12:06:36Z" level=info duration="81.952µs" duration-ns=81952 fields.time="2026-06-22T12:06:36Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address="::1" request-id=fa71ff9b-0fb2-452e-b6ce-1966f2d07395 size=16 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id= time="2026-06-22T12:06:36Z" level=info duration="181.297µs" duration-ns=181297 fields.time="2026-06-22T12:06:36Z" method=GET name=ca path="/provisioners?limit=100" protocol=HTTP/2.0 referer= remote-address="::1" request-id=bb69448e-1c8a-48e2-aabb-b9ce25aa040c size=867 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id= time="2026-06-22T12:06:36Z" level=warning duration="22.798µs" duration-ns=22798 fields.time="2026-06-22T12:06:36Z" method=GET name=ca path=/admin/admins protocol=HTTP/2.0 referer= remote-address="::1" request-id=f495ba03-93a0-4cd3-9b88-0701ba33289b size=19 status=404 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id= 2026/06/22 12:06:37 shutting down ... badger 2026/06/22 12:06:37 INFO: Storing value log head: {Fid:0 Len:30 Offset:3169} badger 2026/06/22 12:06:37 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0 badger 2026/06/22 12:06:37 INFO: LOG Compact 0->1, del 2 tables, add 1 tables, took 7.369231ms badger 2026/06/22 12:06:37 INFO: [Compactor: 173] Compaction for level: 0 DONE badger 2026/06/22 12:06:37 INFO: Force compaction on level 0 done badger 2026/06/22 12:06:38 INFO: All 1 tables opened in 1ms badger 2026/06/22 12:06:38 INFO: Replaying file id: 0 at offset: 3199 badger 2026/06/22 12:06:38 INFO: Replay took: 3.352µs 2026/06/22 12:06:38 Building new tls configuration using step-ca x509 Signer Interface 2026/06/22 12:06:38 Starting Smallstep CA/0.28.4 (linux/amd64) 2026/06/22 12:06:38 Documentation: https://u.step.sm/docs/ca 2026/06/22 12:06:38 Community Discord: https://u.step.sm/discord 2026/06/22 12:06:38 Config file: /home/step/config/ca.json 2026/06/22 12:06:38 The primary server URL is https://localhost:9000 2026/06/22 12:06:38 Root certificates are available at https://localhost:9000/roots.pem 2026/06/22 12:06:38 Additional configured hostnames: 127.0.0.1 2026/06/22 12:06:38 X.509 Root Fingerprint: d89cac95a315def64cbd1553b0d1d341f647a8f62f21460dcb49f7e73bd4ae46 2026/06/22 12:06:38 Serving HTTPS on :9000 ... time="2026-06-22T12:07:04Z" level=info duration="92.674µs" duration-ns=92674 fields.time="2026-06-22T12:07:04Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=911c0bca-d986-40f0-8e7a-37f5393438a4 size=16 status=200 user-agent=curl/8.5.0 user-id= time="2026-06-22T12:07:04Z" level=info duration="29.205µs" duration-ns=29205 fields.time="2026-06-22T12:07:04Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=042b60be-8fd3-4d13-855c-6a13415c5ffe size=16 status=200 user-agent=curl/8.5.0 user-id= time="2026-06-22T12:07:08Z" level=info duration="15.834µs" duration-ns=15834 fields.time="2026-06-22T12:07:08Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address="::1" request-id=742c6396-27ad-42e9-82b1-43265438f29f size=16 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id=