Generating root certificate... done! Generating intermediate certificate... done! ✔ Root certificate: /home/step/certs/root_ca.crt ✔ Root private key: /home/step/secrets/root_ca_key ✔ Root fingerprint: bdb2c19bda2c2c68558f8c3964df4b80c1d892edc19b973a982e205bcd51395f ✔ Intermediate certificate: /home/step/certs/intermediate_ca.crt ✔ Intermediate private key: /home/step/secrets/intermediate_ca_key ✔ Database folder: /home/step/db ✔ Default configuration: /home/step/config/defaults.json ✔ Certificate Authority configuration: /home/step/config/ca.json Your PKI is ready to go. To generate certificates for individual services see 'step help ca'. FEEDBACK 😍 🍻 The step utility is not instrumented for usage statistics. It does not phone home. But your feedback is extremely valuable. Any information you can provide regarding how you’re using `step` helps. Please send us a sentence or two, good or bad at feedback@smallstep.com or join GitHub Discussions https://github.com/smallstep/certificates/discussions and our Discord https://u.step.sm/discord. 👉 Your CA administrative password is: wcDbx7pCm7WJTi9Pjq8U8Ma6AkcVvKgsHPGaMyaj 🤫 This will only be displayed once. badger 2026/07/02 18:44:39 INFO: All 0 tables opened in 0s 2026/07/02 18:44:39 Building new tls configuration using step-ca x509 Signer Interface 2026/07/02 18:44:39 Starting Smallstep CA/0.28.4 (linux/amd64) 2026/07/02 18:44:39 Documentation: https://u.step.sm/docs/ca 2026/07/02 18:44:39 Community Discord: https://u.step.sm/discord 2026/07/02 18:44:39 Config file: /home/step/config/ca.json 2026/07/02 18:44:39 The primary server URL is https://localhost:9000 2026/07/02 18:44:39 Root certificates are available at https://localhost:9000/roots.pem 2026/07/02 18:44:39 Additional configured hostnames: 127.0.0.1 2026/07/02 18:44:39 X.509 Root Fingerprint: bdb2c19bda2c2c68558f8c3964df4b80c1d892edc19b973a982e205bcd51395f 2026/07/02 18:44:39 Serving HTTPS on :9000 ... 2026/07/02 18:44:58 shutting down ... badger 2026/07/02 18:44:58 INFO: Storing value log head: {Fid:0 Len:30 Offset:1575} badger 2026/07/02 18:44:58 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0 badger 2026/07/02 18:44:58 INFO: LOG Compact 0->1, del 1 tables, add 1 tables, took 9.588826ms badger 2026/07/02 18:44:58 INFO: [Compactor: 173] Compaction for level: 0 DONE badger 2026/07/02 18:44:58 INFO: Force compaction on level 0 done badger 2026/07/02 18:44:59 INFO: All 1 tables opened in 2ms badger 2026/07/02 18:44:59 INFO: Replaying file id: 0 at offset: 1605 badger 2026/07/02 18:44:59 INFO: Replay took: 2.911µs 2026/07/02 18:44:59 Building new tls configuration using step-ca x509 Signer Interface 2026/07/02 18:44:59 Starting Smallstep CA/0.28.4 (linux/amd64) 2026/07/02 18:44:59 Documentation: https://u.step.sm/docs/ca 2026/07/02 18:44:59 Community Discord: https://u.step.sm/discord 2026/07/02 18:44:59 Config file: /home/step/config/ca.json 2026/07/02 18:44:59 The primary server URL is https://localhost:9000 2026/07/02 18:44:59 Root certificates are available at https://localhost:9000/roots.pem 2026/07/02 18:44:59 Additional configured hostnames: 127.0.0.1 2026/07/02 18:44:59 X.509 Root Fingerprint: bdb2c19bda2c2c68558f8c3964df4b80c1d892edc19b973a982e205bcd51395f 2026/07/02 18:44:59 Serving HTTPS on :9000 ... time="2026-07-02T18:45:09Z" level=info duration="109.563µs" duration-ns=109563 fields.time="2026-07-02T18:45:09Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address="::1" request-id=5f9478c2-612d-4f87-bf60-178db3928bd9 size=16 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id= time="2026-07-02T18:45:10Z" level=info duration="202.311µs" duration-ns=202311 fields.time="2026-07-02T18:45:10Z" method=GET name=ca path="/provisioners?limit=100" protocol=HTTP/2.0 referer= remote-address="::1" request-id=b65f859a-b886-4b3f-ad2d-0602472f6a69 size=867 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id= time="2026-07-02T18:45:10Z" level=warning duration="23.31µs" duration-ns=23310 fields.time="2026-07-02T18:45:10Z" method=GET name=ca path=/admin/admins protocol=HTTP/2.0 referer= remote-address="::1" request-id=384e112a-c92f-4354-8b5b-185d974b97aa size=19 status=404 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id= 2026/07/02 18:45:11 shutting down ... badger 2026/07/02 18:45:11 INFO: Storing value log head: {Fid:0 Len:30 Offset:3169} badger 2026/07/02 18:45:11 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0 badger 2026/07/02 18:45:11 INFO: LOG Compact 0->1, del 2 tables, add 1 tables, took 8.03961ms badger 2026/07/02 18:45:11 INFO: [Compactor: 173] Compaction for level: 0 DONE badger 2026/07/02 18:45:11 INFO: Force compaction on level 0 done badger 2026/07/02 18:45:12 INFO: All 1 tables opened in 2ms badger 2026/07/02 18:45:12 INFO: Replaying file id: 0 at offset: 3199 badger 2026/07/02 18:45:12 INFO: Replay took: 3.974µs 2026/07/02 18:45:12 Building new tls configuration using step-ca x509 Signer Interface 2026/07/02 18:45:12 Starting Smallstep CA/0.28.4 (linux/amd64) 2026/07/02 18:45:12 Documentation: https://u.step.sm/docs/ca 2026/07/02 18:45:12 Community Discord: https://u.step.sm/discord 2026/07/02 18:45:12 Config file: /home/step/config/ca.json 2026/07/02 18:45:12 The primary server URL is https://localhost:9000 2026/07/02 18:45:12 Root certificates are available at https://localhost:9000/roots.pem 2026/07/02 18:45:12 Additional configured hostnames: 127.0.0.1 2026/07/02 18:45:12 X.509 Root Fingerprint: bdb2c19bda2c2c68558f8c3964df4b80c1d892edc19b973a982e205bcd51395f 2026/07/02 18:45:12 Serving HTTPS on :9000 ... time="2026-07-02T18:45:26Z" level=info duration="235.208µs" duration-ns=235208 fields.time="2026-07-02T18:45:26Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=162548fd-5848-42d2-8756-d7b34787744a size=16 status=200 user-agent=curl/7.88.1 user-id= time="2026-07-02T18:45:26Z" level=info duration="31.574µs" duration-ns=31574 fields.time="2026-07-02T18:45:26Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=bf3dc725-3f35-403b-9da6-659cf5fff26f size=16 status=200 user-agent=curl/7.88.1 user-id=