Generating root certificate... done! Generating intermediate certificate... done! ✔ Root certificate: /home/step/certs/root_ca.crt ✔ Root private key: /home/step/secrets/root_ca_key ✔ Root fingerprint: 76cc9525fb9858322b24071d94d5b6bc9954a01673f3b5b239c04d5e9a3121e0 ✔ Intermediate certificate: /home/step/certs/intermediate_ca.crt ✔ Intermediate private key: /home/step/secrets/intermediate_ca_key ✔ Database folder: /home/step/db ✔ Default configuration: /home/step/config/defaults.json ✔ Certificate Authority configuration: /home/step/config/ca.json Your PKI is ready to go. To generate certificates for individual services see 'step help ca'. FEEDBACK 😍 🍻 The step utility is not instrumented for usage statistics. It does not phone home. But your feedback is extremely valuable. Any information you can provide regarding how you’re using `step` helps. Please send us a sentence or two, good or bad at feedback@smallstep.com or join GitHub Discussions https://github.com/smallstep/certificates/discussions and our Discord https://u.step.sm/discord. 👉 Your CA administrative password is: AjVleKUqXxg6k1j62sHtYvODCaCo3BjvergU2Zr4 🤫 This will only be displayed once. badger 2026/06/15 04:59:28 INFO: All 0 tables opened in 0s 2026/06/15 04:59:28 Building new tls configuration using step-ca x509 Signer Interface 2026/06/15 04:59:28 Starting Smallstep CA/0.28.4 (linux/amd64) 2026/06/15 04:59:28 Documentation: https://u.step.sm/docs/ca 2026/06/15 04:59:28 Community Discord: https://u.step.sm/discord 2026/06/15 04:59:28 Config file: /home/step/config/ca.json 2026/06/15 04:59:28 The primary server URL is https://localhost:9000 2026/06/15 04:59:28 Root certificates are available at https://localhost:9000/roots.pem 2026/06/15 04:59:28 Additional configured hostnames: 127.0.0.1 2026/06/15 04:59:28 X.509 Root Fingerprint: 76cc9525fb9858322b24071d94d5b6bc9954a01673f3b5b239c04d5e9a3121e0 2026/06/15 04:59:28 Serving HTTPS on :9000 ... 2026/06/15 04:59:47 shutting down ... badger 2026/06/15 04:59:47 INFO: Storing value log head: {Fid:0 Len:30 Offset:1575} badger 2026/06/15 04:59:47 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0 badger 2026/06/15 04:59:47 INFO: LOG Compact 0->1, del 1 tables, add 1 tables, took 11.079124ms badger 2026/06/15 04:59:47 INFO: [Compactor: 173] Compaction for level: 0 DONE badger 2026/06/15 04:59:47 INFO: Force compaction on level 0 done badger 2026/06/15 04:59:48 INFO: All 1 tables opened in 2ms badger 2026/06/15 04:59:48 INFO: Replaying file id: 0 at offset: 1605 badger 2026/06/15 04:59:48 INFO: Replay took: 2.994µs 2026/06/15 04:59:48 Building new tls configuration using step-ca x509 Signer Interface 2026/06/15 04:59:48 Starting Smallstep CA/0.28.4 (linux/amd64) 2026/06/15 04:59:48 Documentation: https://u.step.sm/docs/ca 2026/06/15 04:59:48 Community Discord: https://u.step.sm/discord 2026/06/15 04:59:48 Config file: /home/step/config/ca.json 2026/06/15 04:59:48 The primary server URL is https://localhost:9000 2026/06/15 04:59:48 Root certificates are available at https://localhost:9000/roots.pem 2026/06/15 04:59:48 Additional configured hostnames: 127.0.0.1 2026/06/15 04:59:48 X.509 Root Fingerprint: 76cc9525fb9858322b24071d94d5b6bc9954a01673f3b5b239c04d5e9a3121e0 2026/06/15 04:59:48 Serving HTTPS on :9000 ... time="2026-06-15T04:59:59Z" level=info duration="191.739µs" duration-ns=191739 fields.time="2026-06-15T04:59:59Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address="::1" request-id=9ff3789a-4629-469d-b1a4-37798bd845de size=16 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id= time="2026-06-15T04:59:59Z" level=info duration="218.659µs" duration-ns=218659 fields.time="2026-06-15T04:59:59Z" method=GET name=ca path="/provisioners?limit=100" protocol=HTTP/2.0 referer= remote-address="::1" request-id=686ba898-74fe-4253-aa07-4ce99eb69d37 size=867 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id= time="2026-06-15T04:59:59Z" level=warning duration="21.15µs" duration-ns=21150 fields.time="2026-06-15T04:59:59Z" method=GET name=ca path=/admin/admins protocol=HTTP/2.0 referer= remote-address="::1" request-id=d604380e-14ff-4d83-870a-f1de027dd763 size=19 status=404 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id= 2026/06/15 05:00:00 shutting down ... badger 2026/06/15 05:00:00 INFO: Storing value log head: {Fid:0 Len:30 Offset:3169} badger 2026/06/15 05:00:00 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0 badger 2026/06/15 05:00:00 INFO: LOG Compact 0->1, del 2 tables, add 1 tables, took 19.759609ms badger 2026/06/15 05:00:00 INFO: [Compactor: 173] Compaction for level: 0 DONE badger 2026/06/15 05:00:00 INFO: Force compaction on level 0 done badger 2026/06/15 05:00:01 INFO: All 1 tables opened in 1ms badger 2026/06/15 05:00:01 INFO: Replaying file id: 0 at offset: 3199 badger 2026/06/15 05:00:01 INFO: Replay took: 12.384µs 2026/06/15 05:00:01 Building new tls configuration using step-ca x509 Signer Interface 2026/06/15 05:00:01 Starting Smallstep CA/0.28.4 (linux/amd64) 2026/06/15 05:00:01 Documentation: https://u.step.sm/docs/ca 2026/06/15 05:00:01 Community Discord: https://u.step.sm/discord 2026/06/15 05:00:01 Config file: /home/step/config/ca.json 2026/06/15 05:00:01 The primary server URL is https://localhost:9000 2026/06/15 05:00:01 Root certificates are available at https://localhost:9000/roots.pem 2026/06/15 05:00:01 Additional configured hostnames: 127.0.0.1 2026/06/15 05:00:01 X.509 Root Fingerprint: 76cc9525fb9858322b24071d94d5b6bc9954a01673f3b5b239c04d5e9a3121e0 2026/06/15 05:00:01 Serving HTTPS on :9000 ... time="2026-06-15T05:00:15Z" level=info duration="119.821µs" duration-ns=119821 fields.time="2026-06-15T05:00:15Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=dba61a7d-d2ea-4aaf-9978-003942b0983f size=16 status=200 user-agent=curl/8.5.0 user-id= time="2026-06-15T05:00:15Z" level=info duration="21.275µs" duration-ns=21275 fields.time="2026-06-15T05:00:15Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=362f8575-ff76-438e-a4e8-29830b8c08da size=16 status=200 user-agent=curl/8.5.0 user-id=