Generating root certificate... done!
Generating intermediate certificate... done!

✔ Root certificate: /home/step/certs/root_ca.crt
✔ Root private key: /home/step/secrets/root_ca_key
✔ Root fingerprint: 71d0a3d33c9c4228bc9c63954e52f01b6a45dc4333e104fac41afefc0ffc187a
✔ Intermediate certificate: /home/step/certs/intermediate_ca.crt
✔ Intermediate private key: /home/step/secrets/intermediate_ca_key
✔ Database folder: /home/step/db
✔ Default configuration: /home/step/config/defaults.json
✔ Certificate Authority configuration: /home/step/config/ca.json

Your PKI is ready to go. To generate certificates for individual services see 'step help ca'.

FEEDBACK 😍 🍻
  The step utility is not instrumented for usage statistics. It does not phone
  home. But your feedback is extremely valuable. Any information you can provide
  regarding how you’re using `step` helps. Please send us a sentence or two,
  good or bad at feedback@smallstep.com or join GitHub Discussions
  https://github.com/smallstep/certificates/discussions and our Discord 
  https://u.step.sm/discord.

👉 Your CA administrative password is: TXk65gkfkS1xlECFkfeN2wJba3bFXb8jTQ9Vc4SB
🤫 This will only be displayed once.
badger 2026/07/02 18:44:41 INFO: All 0 tables opened in 0s
2026/07/02 18:44:41 Building new tls configuration using step-ca x509 Signer Interface
2026/07/02 18:44:41 Starting Smallstep CA/0.28.4 (linux/amd64)
2026/07/02 18:44:41 Documentation: https://u.step.sm/docs/ca
2026/07/02 18:44:41 Community Discord: https://u.step.sm/discord
2026/07/02 18:44:41 Config file: /home/step/config/ca.json
2026/07/02 18:44:41 The primary server URL is https://localhost:9000
2026/07/02 18:44:41 Root certificates are available at https://localhost:9000/roots.pem
2026/07/02 18:44:41 Additional configured hostnames: 127.0.0.1
2026/07/02 18:44:41 X.509 Root Fingerprint: 71d0a3d33c9c4228bc9c63954e52f01b6a45dc4333e104fac41afefc0ffc187a
2026/07/02 18:44:41 Serving HTTPS on :9000 ...
2026/07/02 18:45:01 shutting down ...
badger 2026/07/02 18:45:01 INFO: Storing value log head: {Fid:0 Len:30 Offset:1575}
badger 2026/07/02 18:45:01 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0
badger 2026/07/02 18:45:01 INFO: LOG Compact 0->1, del 1 tables, add 1 tables, took 9.037197ms
badger 2026/07/02 18:45:01 INFO: [Compactor: 173] Compaction for level: 0 DONE
badger 2026/07/02 18:45:01 INFO: Force compaction on level 0 done
badger 2026/07/02 18:45:01 INFO: All 1 tables opened in 3ms
badger 2026/07/02 18:45:02 INFO: Replaying file id: 0 at offset: 1605
badger 2026/07/02 18:45:02 INFO: Replay took: 3.917µs
2026/07/02 18:45:02 Building new tls configuration using step-ca x509 Signer Interface
2026/07/02 18:45:02 Starting Smallstep CA/0.28.4 (linux/amd64)
2026/07/02 18:45:02 Documentation: https://u.step.sm/docs/ca
2026/07/02 18:45:02 Community Discord: https://u.step.sm/discord
2026/07/02 18:45:02 Config file: /home/step/config/ca.json
2026/07/02 18:45:02 The primary server URL is https://localhost:9000
2026/07/02 18:45:02 Root certificates are available at https://localhost:9000/roots.pem
2026/07/02 18:45:02 Additional configured hostnames: 127.0.0.1
2026/07/02 18:45:02 X.509 Root Fingerprint: 71d0a3d33c9c4228bc9c63954e52f01b6a45dc4333e104fac41afefc0ffc187a
2026/07/02 18:45:02 Serving HTTPS on :9000 ...
time="2026-07-02T18:45:02Z" level=info duration="258.536µs" duration-ns=258536 fields.time="2026-07-02T18:45:02Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address="::1" request-id=e967c218-3953-4215-a206-d399fad4de43 size=16 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id=
time="2026-07-02T18:45:02Z" level=info duration="285.64µs" duration-ns=285640 fields.time="2026-07-02T18:45:02Z" method=GET name=ca path="/provisioners?limit=100" protocol=HTTP/2.0 referer= remote-address="::1" request-id=854ff4b0-0fc7-451c-a599-504e85db835f size=867 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id=
time="2026-07-02T18:45:03Z" level=warning duration="31.083µs" duration-ns=31083 fields.time="2026-07-02T18:45:03Z" method=GET name=ca path=/admin/admins protocol=HTTP/2.0 referer= remote-address="::1" request-id=f0be7d7e-ff48-4d9a-b300-9561476cd25d size=19 status=404 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id=
2026/07/02 18:45:04 shutting down ...
badger 2026/07/02 18:45:04 INFO: Storing value log head: {Fid:0 Len:30 Offset:3169}
badger 2026/07/02 18:45:04 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0
badger 2026/07/02 18:45:04 INFO: LOG Compact 0->1, del 2 tables, add 1 tables, took 8.248239ms
badger 2026/07/02 18:45:04 INFO: [Compactor: 173] Compaction for level: 0 DONE
badger 2026/07/02 18:45:04 INFO: Force compaction on level 0 done
badger 2026/07/02 18:45:04 INFO: All 1 tables opened in 1ms
badger 2026/07/02 18:45:04 INFO: Replaying file id: 0 at offset: 3199
badger 2026/07/02 18:45:04 INFO: Replay took: 2.758µs
2026/07/02 18:45:04 Building new tls configuration using step-ca x509 Signer Interface
2026/07/02 18:45:04 Starting Smallstep CA/0.28.4 (linux/amd64)
2026/07/02 18:45:04 Documentation: https://u.step.sm/docs/ca
2026/07/02 18:45:04 Community Discord: https://u.step.sm/discord
2026/07/02 18:45:04 Config file: /home/step/config/ca.json
2026/07/02 18:45:04 The primary server URL is https://localhost:9000
2026/07/02 18:45:04 Root certificates are available at https://localhost:9000/roots.pem
2026/07/02 18:45:04 Additional configured hostnames: 127.0.0.1
2026/07/02 18:45:04 X.509 Root Fingerprint: 71d0a3d33c9c4228bc9c63954e52f01b6a45dc4333e104fac41afefc0ffc187a
2026/07/02 18:45:04 Serving HTTPS on :9000 ...
time="2026-07-02T18:45:28Z" level=info duration="112.969µs" duration-ns=112969 fields.time="2026-07-02T18:45:28Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=364e6dda-0e78-46df-bd2c-9a58358011ec size=16 status=200 user-agent=curl/8.5.0 user-id=
time="2026-07-02T18:45:28Z" level=info duration="28.244µs" duration-ns=28244 fields.time="2026-07-02T18:45:28Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=f8388d40-febf-45a7-bac2-c13d0ee41f17 size=16 status=200 user-agent=curl/8.5.0 user-id=