Generating root certificate... done! Generating intermediate certificate... done! ✔ Root certificate: /home/step/certs/root_ca.crt ✔ Root private key: /home/step/secrets/root_ca_key ✔ Root fingerprint: f80530af68250d99b08a86344824a6645ee4f78f0e4d9f5638b97963b816aed8 ✔ Intermediate certificate: /home/step/certs/intermediate_ca.crt ✔ Intermediate private key: /home/step/secrets/intermediate_ca_key ✔ Database folder: /home/step/db ✔ Default configuration: /home/step/config/defaults.json ✔ Certificate Authority configuration: /home/step/config/ca.json Your PKI is ready to go. To generate certificates for individual services see 'step help ca'. FEEDBACK 😍 🍻 The step utility is not instrumented for usage statistics. It does not phone home. But your feedback is extremely valuable. Any information you can provide regarding how you’re using `step` helps. Please send us a sentence or two, good or bad at feedback@smallstep.com or join GitHub Discussions https://github.com/smallstep/certificates/discussions and our Discord https://u.step.sm/discord. 👉 Your CA administrative password is: HPkCcCTVY6JlzDbCxjk7HVsrSLonRiYF1loomeyz 🤫 This will only be displayed once. badger 2026/06/02 06:10:11 INFO: All 0 tables opened in 0s 2026/06/02 06:10:11 Building new tls configuration using step-ca x509 Signer Interface 2026/06/02 06:10:11 Starting Smallstep CA/0.28.4 (linux/amd64) 2026/06/02 06:10:11 Documentation: https://u.step.sm/docs/ca 2026/06/02 06:10:11 Community Discord: https://u.step.sm/discord 2026/06/02 06:10:11 Config file: /home/step/config/ca.json 2026/06/02 06:10:11 The primary server URL is https://localhost:9000 2026/06/02 06:10:11 Root certificates are available at https://localhost:9000/roots.pem 2026/06/02 06:10:11 Additional configured hostnames: 127.0.0.1 2026/06/02 06:10:11 X.509 Root Fingerprint: f80530af68250d99b08a86344824a6645ee4f78f0e4d9f5638b97963b816aed8 2026/06/02 06:10:11 Serving HTTPS on :9000 ... 2026/06/02 06:10:31 shutting down ... badger 2026/06/02 06:10:31 INFO: Storing value log head: {Fid:0 Len:30 Offset:1575} badger 2026/06/02 06:10:31 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0 badger 2026/06/02 06:10:31 INFO: LOG Compact 0->1, del 1 tables, add 1 tables, took 10.484506ms badger 2026/06/02 06:10:31 INFO: [Compactor: 173] Compaction for level: 0 DONE badger 2026/06/02 06:10:31 INFO: Force compaction on level 0 done badger 2026/06/02 06:10:32 INFO: All 1 tables opened in 2ms badger 2026/06/02 06:10:32 INFO: Replaying file id: 0 at offset: 1605 badger 2026/06/02 06:10:32 INFO: Replay took: 4.943µs 2026/06/02 06:10:32 Building new tls configuration using step-ca x509 Signer Interface 2026/06/02 06:10:32 Starting Smallstep CA/0.28.4 (linux/amd64) 2026/06/02 06:10:32 Documentation: https://u.step.sm/docs/ca 2026/06/02 06:10:32 Community Discord: https://u.step.sm/discord 2026/06/02 06:10:32 Config file: /home/step/config/ca.json 2026/06/02 06:10:32 The primary server URL is https://localhost:9000 2026/06/02 06:10:32 Root certificates are available at https://localhost:9000/roots.pem 2026/06/02 06:10:32 Additional configured hostnames: 127.0.0.1 2026/06/02 06:10:32 X.509 Root Fingerprint: f80530af68250d99b08a86344824a6645ee4f78f0e4d9f5638b97963b816aed8 2026/06/02 06:10:32 Serving HTTPS on :9000 ... time="2026-06-02T06:10:42Z" level=info duration="82.727µs" duration-ns=82727 fields.time="2026-06-02T06:10:42Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address="::1" request-id=7098607c-bd7c-435e-9bbd-6c859af8ea50 size=16 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id= time="2026-06-02T06:10:43Z" level=info duration="307.199µs" duration-ns=307199 fields.time="2026-06-02T06:10:43Z" method=GET name=ca path="/provisioners?limit=100" protocol=HTTP/2.0 referer= remote-address="::1" request-id=de9b7732-8a27-4a97-891b-b89d68e334c0 size=867 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id= time="2026-06-02T06:10:43Z" level=warning duration="23.403µs" duration-ns=23403 fields.time="2026-06-02T06:10:43Z" method=GET name=ca path=/admin/admins protocol=HTTP/2.0 referer= remote-address="::1" request-id=3643df72-dc38-4570-9cdd-ec578085e2ad size=19 status=404 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id= 2026/06/02 06:10:44 shutting down ... badger 2026/06/02 06:10:44 INFO: Storing value log head: {Fid:0 Len:30 Offset:3169} badger 2026/06/02 06:10:44 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0 badger 2026/06/02 06:10:44 INFO: LOG Compact 0->1, del 2 tables, add 1 tables, took 8.987338ms badger 2026/06/02 06:10:44 INFO: [Compactor: 173] Compaction for level: 0 DONE badger 2026/06/02 06:10:44 INFO: Force compaction on level 0 done badger 2026/06/02 06:10:45 INFO: All 1 tables opened in 2ms badger 2026/06/02 06:10:45 INFO: Replaying file id: 0 at offset: 3199 badger 2026/06/02 06:10:45 INFO: Replay took: 3.117µs 2026/06/02 06:10:45 Building new tls configuration using step-ca x509 Signer Interface 2026/06/02 06:10:45 Starting Smallstep CA/0.28.4 (linux/amd64) 2026/06/02 06:10:45 Documentation: https://u.step.sm/docs/ca 2026/06/02 06:10:45 Community Discord: https://u.step.sm/discord 2026/06/02 06:10:45 Config file: /home/step/config/ca.json 2026/06/02 06:10:45 The primary server URL is https://localhost:9000 2026/06/02 06:10:45 Root certificates are available at https://localhost:9000/roots.pem 2026/06/02 06:10:45 Additional configured hostnames: 127.0.0.1 2026/06/02 06:10:45 X.509 Root Fingerprint: f80530af68250d99b08a86344824a6645ee4f78f0e4d9f5638b97963b816aed8 2026/06/02 06:10:45 Serving HTTPS on :9000 ... time="2026-06-02T06:11:00Z" level=info duration="87.307µs" duration-ns=87307 fields.time="2026-06-02T06:11:00Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=652c6e2b-2afd-4c59-8b4e-7f58b97f4861 size=16 status=200 user-agent=curl/8.5.0 user-id= time="2026-06-02T06:11:00Z" level=info duration="22.974µs" duration-ns=22974 fields.time="2026-06-02T06:11:00Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=4062843e-c0e2-4946-b0ce-1811b5cc75a3 size=16 status=200 user-agent=curl/8.5.0 user-id=