Generating root certificate... done!
Generating intermediate certificate... done!

✔ Root certificate: /home/step/certs/root_ca.crt
✔ Root private key: /home/step/secrets/root_ca_key
✔ Root fingerprint: 3ac79a009d8ae85b00c5f9c8c1f6368ad34fdde33b32c7d0b02a4488241ef0db
✔ Intermediate certificate: /home/step/certs/intermediate_ca.crt
✔ Intermediate private key: /home/step/secrets/intermediate_ca_key
✔ Database folder: /home/step/db
✔ Default configuration: /home/step/config/defaults.json
✔ Certificate Authority configuration: /home/step/config/ca.json

Your PKI is ready to go. To generate certificates for individual services see 'step help ca'.

FEEDBACK 😍 🍻
  The step utility is not instrumented for usage statistics. It does not phone
  home. But your feedback is extremely valuable. Any information you can provide
  regarding how you’re using `step` helps. Please send us a sentence or two,
  good or bad at feedback@smallstep.com or join GitHub Discussions
  https://github.com/smallstep/certificates/discussions and our Discord 
  https://u.step.sm/discord.

👉 Your CA administrative password is: lxjpulneU8XwfqAyqg7taOww2zM6f16oiCVPJbVw
🤫 This will only be displayed once.
badger 2026/06/02 09:08:24 INFO: All 0 tables opened in 0s
2026/06/02 09:08:24 Building new tls configuration using step-ca x509 Signer Interface
2026/06/02 09:08:24 Starting Smallstep CA/0.28.4 (linux/amd64)
2026/06/02 09:08:24 Documentation: https://u.step.sm/docs/ca
2026/06/02 09:08:24 Community Discord: https://u.step.sm/discord
2026/06/02 09:08:24 Config file: /home/step/config/ca.json
2026/06/02 09:08:24 The primary server URL is https://localhost:9000
2026/06/02 09:08:24 Root certificates are available at https://localhost:9000/roots.pem
2026/06/02 09:08:24 Additional configured hostnames: 127.0.0.1
2026/06/02 09:08:24 X.509 Root Fingerprint: 3ac79a009d8ae85b00c5f9c8c1f6368ad34fdde33b32c7d0b02a4488241ef0db
2026/06/02 09:08:24 Serving HTTPS on :9000 ...
2026/06/02 09:08:43 shutting down ...
badger 2026/06/02 09:08:43 INFO: Storing value log head: {Fid:0 Len:30 Offset:1575}
badger 2026/06/02 09:08:43 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0
badger 2026/06/02 09:08:43 INFO: LOG Compact 0->1, del 1 tables, add 1 tables, took 15.656699ms
badger 2026/06/02 09:08:43 INFO: [Compactor: 173] Compaction for level: 0 DONE
badger 2026/06/02 09:08:43 INFO: Force compaction on level 0 done
badger 2026/06/02 09:08:44 INFO: All 1 tables opened in 1ms
badger 2026/06/02 09:08:44 INFO: Replaying file id: 0 at offset: 1605
badger 2026/06/02 09:08:44 INFO: Replay took: 6.184µs
2026/06/02 09:08:44 Building new tls configuration using step-ca x509 Signer Interface
2026/06/02 09:08:44 Starting Smallstep CA/0.28.4 (linux/amd64)
2026/06/02 09:08:44 Documentation: https://u.step.sm/docs/ca
2026/06/02 09:08:44 Community Discord: https://u.step.sm/discord
2026/06/02 09:08:44 Config file: /home/step/config/ca.json
2026/06/02 09:08:44 The primary server URL is https://localhost:9000
2026/06/02 09:08:44 Root certificates are available at https://localhost:9000/roots.pem
2026/06/02 09:08:44 Additional configured hostnames: 127.0.0.1
2026/06/02 09:08:44 X.509 Root Fingerprint: 3ac79a009d8ae85b00c5f9c8c1f6368ad34fdde33b32c7d0b02a4488241ef0db
2026/06/02 09:08:44 Serving HTTPS on :9000 ...
time="2026-06-02T09:08:44Z" level=info duration="105.309µs" duration-ns=105309 fields.time="2026-06-02T09:08:44Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address="::1" request-id=82562dd4-2525-42f1-b7e4-e310a149cf77 size=16 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id=
time="2026-06-02T09:08:45Z" level=info duration="210.423µs" duration-ns=210423 fields.time="2026-06-02T09:08:45Z" method=GET name=ca path="/provisioners?limit=100" protocol=HTTP/2.0 referer= remote-address="::1" request-id=ef9d74de-6f16-49cb-bcd2-a7c230dd70b2 size=867 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id=
time="2026-06-02T09:08:45Z" level=warning duration="19.997µs" duration-ns=19997 fields.time="2026-06-02T09:08:45Z" method=GET name=ca path=/admin/admins protocol=HTTP/2.0 referer= remote-address="::1" request-id=68b9b29a-e69f-4311-9f94-3e8a116b3667 size=19 status=404 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id=
2026/06/02 09:08:46 shutting down ...
badger 2026/06/02 09:08:46 INFO: Storing value log head: {Fid:0 Len:30 Offset:3169}
badger 2026/06/02 09:08:46 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0
badger 2026/06/02 09:08:46 INFO: LOG Compact 0->1, del 2 tables, add 1 tables, took 12.366574ms
badger 2026/06/02 09:08:46 INFO: [Compactor: 173] Compaction for level: 0 DONE
badger 2026/06/02 09:08:46 INFO: Force compaction on level 0 done
badger 2026/06/02 09:08:47 INFO: All 1 tables opened in 1ms
badger 2026/06/02 09:08:47 INFO: Replaying file id: 0 at offset: 3199
badger 2026/06/02 09:08:47 INFO: Replay took: 6.601µs
2026/06/02 09:08:47 Building new tls configuration using step-ca x509 Signer Interface
2026/06/02 09:08:47 Starting Smallstep CA/0.28.4 (linux/amd64)
2026/06/02 09:08:47 Documentation: https://u.step.sm/docs/ca
2026/06/02 09:08:47 Community Discord: https://u.step.sm/discord
2026/06/02 09:08:47 Config file: /home/step/config/ca.json
2026/06/02 09:08:47 The primary server URL is https://localhost:9000
2026/06/02 09:08:47 Root certificates are available at https://localhost:9000/roots.pem
2026/06/02 09:08:47 Additional configured hostnames: 127.0.0.1
2026/06/02 09:08:47 X.509 Root Fingerprint: 3ac79a009d8ae85b00c5f9c8c1f6368ad34fdde33b32c7d0b02a4488241ef0db
2026/06/02 09:08:47 Serving HTTPS on :9000 ...
time="2026-06-02T09:09:00Z" level=info duration="187.651µs" duration-ns=187651 fields.time="2026-06-02T09:09:00Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=5186c864-663f-450c-bac4-e40611bfdf30 size=16 status=200 user-agent=curl/8.5.0 user-id=
time="2026-06-02T09:09:00Z" level=info duration="16.576µs" duration-ns=16576 fields.time="2026-06-02T09:09:00Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=295d3aff-e334-4438-889c-a5f9fd37efc5 size=16 status=200 user-agent=curl/8.5.0 user-id=