Generating root certificate... done!
Generating intermediate certificate... done!

✔ Root certificate: /home/step/certs/root_ca.crt
✔ Root private key: /home/step/secrets/root_ca_key
✔ Root fingerprint: c6192f1c0dfa7d7fdf90eb6354a03c31a1d33b8290109509630851e3469d1592
✔ Intermediate certificate: /home/step/certs/intermediate_ca.crt
✔ Intermediate private key: /home/step/secrets/intermediate_ca_key
✔ Database folder: /home/step/db
✔ Default configuration: /home/step/config/defaults.json
✔ Certificate Authority configuration: /home/step/config/ca.json

Your PKI is ready to go. To generate certificates for individual services see 'step help ca'.

FEEDBACK 😍 🍻
  The step utility is not instrumented for usage statistics. It does not phone
  home. But your feedback is extremely valuable. Any information you can provide
  regarding how you’re using `step` helps. Please send us a sentence or two,
  good or bad at feedback@smallstep.com or join GitHub Discussions
  https://github.com/smallstep/certificates/discussions and our Discord 
  https://u.step.sm/discord.

👉 Your CA administrative password is: yXVl5y1I0zU0ZVFMXDrgBJu8rY5Pc6k1uKx0IGCZ
🤫 This will only be displayed once.
badger 2026/06/02 11:22:46 INFO: All 0 tables opened in 0s
2026/06/02 11:22:46 Building new tls configuration using step-ca x509 Signer Interface
2026/06/02 11:22:46 Starting Smallstep CA/0.28.4 (linux/amd64)
2026/06/02 11:22:46 Documentation: https://u.step.sm/docs/ca
2026/06/02 11:22:46 Community Discord: https://u.step.sm/discord
2026/06/02 11:22:46 Config file: /home/step/config/ca.json
2026/06/02 11:22:46 The primary server URL is https://localhost:9000
2026/06/02 11:22:46 Root certificates are available at https://localhost:9000/roots.pem
2026/06/02 11:22:46 Additional configured hostnames: 127.0.0.1
2026/06/02 11:22:46 X.509 Root Fingerprint: c6192f1c0dfa7d7fdf90eb6354a03c31a1d33b8290109509630851e3469d1592
2026/06/02 11:22:46 Serving HTTPS on :9000 ...
2026/06/02 11:23:06 shutting down ...
badger 2026/06/02 11:23:06 INFO: Storing value log head: {Fid:0 Len:30 Offset:1575}
badger 2026/06/02 11:23:06 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0
badger 2026/06/02 11:23:06 INFO: LOG Compact 0->1, del 1 tables, add 1 tables, took 10.68389ms
badger 2026/06/02 11:23:06 INFO: [Compactor: 173] Compaction for level: 0 DONE
badger 2026/06/02 11:23:06 INFO: Force compaction on level 0 done
badger 2026/06/02 11:23:07 INFO: All 1 tables opened in 1ms
badger 2026/06/02 11:23:07 INFO: Replaying file id: 0 at offset: 1605
badger 2026/06/02 11:23:07 INFO: Replay took: 6.352µs
2026/06/02 11:23:07 Building new tls configuration using step-ca x509 Signer Interface
2026/06/02 11:23:07 Starting Smallstep CA/0.28.4 (linux/amd64)
2026/06/02 11:23:07 Documentation: https://u.step.sm/docs/ca
2026/06/02 11:23:07 Community Discord: https://u.step.sm/discord
2026/06/02 11:23:07 Config file: /home/step/config/ca.json
2026/06/02 11:23:07 The primary server URL is https://localhost:9000
2026/06/02 11:23:07 Root certificates are available at https://localhost:9000/roots.pem
2026/06/02 11:23:07 Additional configured hostnames: 127.0.0.1
2026/06/02 11:23:07 X.509 Root Fingerprint: c6192f1c0dfa7d7fdf90eb6354a03c31a1d33b8290109509630851e3469d1592
2026/06/02 11:23:07 Serving HTTPS on :9000 ...
time="2026-06-02T11:23:17Z" level=info duration="110.305µs" duration-ns=110305 fields.time="2026-06-02T11:23:17Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address="::1" request-id=6272b6b2-942a-4b57-8b33-86fb7808850c size=16 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id=
time="2026-06-02T11:23:18Z" level=info duration="229.837µs" duration-ns=229837 fields.time="2026-06-02T11:23:18Z" method=GET name=ca path="/provisioners?limit=100" protocol=HTTP/2.0 referer= remote-address="::1" request-id=98ea35ca-594c-44b5-8f47-c43a301b1895 size=867 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id=
time="2026-06-02T11:23:18Z" level=warning duration="23.189µs" duration-ns=23189 fields.time="2026-06-02T11:23:18Z" method=GET name=ca path=/admin/admins protocol=HTTP/2.0 referer= remote-address="::1" request-id=2ad085ed-865b-4125-a526-e6b80800712d size=19 status=404 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id=
2026/06/02 11:23:19 shutting down ...
badger 2026/06/02 11:23:19 INFO: Storing value log head: {Fid:0 Len:30 Offset:3169}
badger 2026/06/02 11:23:19 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0
badger 2026/06/02 11:23:19 INFO: LOG Compact 0->1, del 2 tables, add 1 tables, took 7.116381ms
badger 2026/06/02 11:23:19 INFO: [Compactor: 173] Compaction for level: 0 DONE
badger 2026/06/02 11:23:19 INFO: Force compaction on level 0 done
badger 2026/06/02 11:23:20 INFO: All 1 tables opened in 2ms
badger 2026/06/02 11:23:20 INFO: Replaying file id: 0 at offset: 3199
badger 2026/06/02 11:23:20 INFO: Replay took: 4.249µs
2026/06/02 11:23:20 Building new tls configuration using step-ca x509 Signer Interface
2026/06/02 11:23:20 Starting Smallstep CA/0.28.4 (linux/amd64)
2026/06/02 11:23:20 Documentation: https://u.step.sm/docs/ca
2026/06/02 11:23:20 Community Discord: https://u.step.sm/discord
2026/06/02 11:23:20 Config file: /home/step/config/ca.json
2026/06/02 11:23:20 The primary server URL is https://localhost:9000
2026/06/02 11:23:20 Root certificates are available at https://localhost:9000/roots.pem
2026/06/02 11:23:20 Additional configured hostnames: 127.0.0.1
2026/06/02 11:23:20 X.509 Root Fingerprint: c6192f1c0dfa7d7fdf90eb6354a03c31a1d33b8290109509630851e3469d1592
2026/06/02 11:23:20 Serving HTTPS on :9000 ...
time="2026-06-02T11:23:33Z" level=info duration="132.991µs" duration-ns=132991 fields.time="2026-06-02T11:23:33Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=b2daa30b-8097-48b4-b498-ca878a178152 size=16 status=200 user-agent=curl/7.88.1 user-id=
time="2026-06-02T11:23:33Z" level=info duration="33.537µs" duration-ns=33537 fields.time="2026-06-02T11:23:33Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=2848b495-d366-4596-a690-5dfe784624d2 size=16 status=200 user-agent=curl/7.88.1 user-id=