Generating root certificate... done! Generating intermediate certificate... done! ✔ Root certificate: /home/step/certs/root_ca.crt ✔ Root private key: /home/step/secrets/root_ca_key ✔ Root fingerprint: 726a79b25e86e2d2bc906b158479e0c7e11620fa9fff08d911b66286d5cdc53c ✔ Intermediate certificate: /home/step/certs/intermediate_ca.crt ✔ Intermediate private key: /home/step/secrets/intermediate_ca_key ✔ Database folder: /home/step/db ✔ Default configuration: /home/step/config/defaults.json ✔ Certificate Authority configuration: /home/step/config/ca.json Your PKI is ready to go. To generate certificates for individual services see 'step help ca'. FEEDBACK 😍 🍻 The step utility is not instrumented for usage statistics. It does not phone home. But your feedback is extremely valuable. Any information you can provide regarding how you’re using `step` helps. Please send us a sentence or two, good or bad at feedback@smallstep.com or join GitHub Discussions https://github.com/smallstep/certificates/discussions and our Discord https://u.step.sm/discord. 👉 Your CA administrative password is: GMzLqLdnToQO6q1MwZtI4jfB5LCVmIOybsvp79X7 🤫 This will only be displayed once. badger 2026/06/02 08:01:20 INFO: All 0 tables opened in 0s 2026/06/02 08:01:20 Building new tls configuration using step-ca x509 Signer Interface 2026/06/02 08:01:20 Starting Smallstep CA/0.28.4 (linux/amd64) 2026/06/02 08:01:20 Documentation: https://u.step.sm/docs/ca 2026/06/02 08:01:20 Community Discord: https://u.step.sm/discord 2026/06/02 08:01:20 Config file: /home/step/config/ca.json 2026/06/02 08:01:20 The primary server URL is https://localhost:9000 2026/06/02 08:01:20 Root certificates are available at https://localhost:9000/roots.pem 2026/06/02 08:01:20 Additional configured hostnames: 127.0.0.1 2026/06/02 08:01:20 X.509 Root Fingerprint: 726a79b25e86e2d2bc906b158479e0c7e11620fa9fff08d911b66286d5cdc53c 2026/06/02 08:01:20 Serving HTTPS on :9000 ... 2026/06/02 08:01:39 shutting down ... badger 2026/06/02 08:01:39 INFO: Storing value log head: {Fid:0 Len:30 Offset:1575} badger 2026/06/02 08:01:39 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0 badger 2026/06/02 08:01:39 INFO: LOG Compact 0->1, del 1 tables, add 1 tables, took 10.62353ms badger 2026/06/02 08:01:39 INFO: [Compactor: 173] Compaction for level: 0 DONE badger 2026/06/02 08:01:39 INFO: Force compaction on level 0 done badger 2026/06/02 08:01:40 INFO: All 1 tables opened in 3ms badger 2026/06/02 08:01:40 INFO: Replaying file id: 0 at offset: 1605 badger 2026/06/02 08:01:40 INFO: Replay took: 2.743µs 2026/06/02 08:01:40 Building new tls configuration using step-ca x509 Signer Interface 2026/06/02 08:01:40 Starting Smallstep CA/0.28.4 (linux/amd64) 2026/06/02 08:01:40 Documentation: https://u.step.sm/docs/ca 2026/06/02 08:01:40 Community Discord: https://u.step.sm/discord 2026/06/02 08:01:40 Config file: /home/step/config/ca.json 2026/06/02 08:01:40 The primary server URL is https://localhost:9000 2026/06/02 08:01:40 Root certificates are available at https://localhost:9000/roots.pem 2026/06/02 08:01:40 Additional configured hostnames: 127.0.0.1 2026/06/02 08:01:40 X.509 Root Fingerprint: 726a79b25e86e2d2bc906b158479e0c7e11620fa9fff08d911b66286d5cdc53c 2026/06/02 08:01:40 Serving HTTPS on :9000 ... time="2026-06-02T08:01:40Z" level=info duration="86.88µs" duration-ns=86880 fields.time="2026-06-02T08:01:40Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address="::1" request-id=e5049f14-a4c3-4fd0-9265-8e296f0f5e07 size=16 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id= time="2026-06-02T08:01:41Z" level=info duration="356.058µs" duration-ns=356058 fields.time="2026-06-02T08:01:41Z" method=GET name=ca path="/provisioners?limit=100" protocol=HTTP/2.0 referer= remote-address="::1" request-id=142dddb4-b33d-49f4-ae6f-c4f68dac11df size=867 status=200 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id= time="2026-06-02T08:01:41Z" level=warning duration="17.846µs" duration-ns=17846 fields.time="2026-06-02T08:01:41Z" method=GET name=ca path=/admin/admins protocol=HTTP/2.0 referer= remote-address="::1" request-id=e8182d1e-d30a-4925-9571-94394da03ff4 size=19 status=404 user-agent="Smallstep CLI/0.28.7 (linux/amd64)" user-id= 2026/06/02 08:01:42 shutting down ... badger 2026/06/02 08:01:42 INFO: Storing value log head: {Fid:0 Len:30 Offset:3169} badger 2026/06/02 08:01:42 INFO: [Compactor: 173] Running compaction: {level:0 score:1.73 dropPrefixes:[]} for level: 0 badger 2026/06/02 08:01:42 INFO: LOG Compact 0->1, del 2 tables, add 1 tables, took 9.030177ms badger 2026/06/02 08:01:42 INFO: [Compactor: 173] Compaction for level: 0 DONE badger 2026/06/02 08:01:42 INFO: Force compaction on level 0 done badger 2026/06/02 08:01:43 INFO: All 1 tables opened in 1ms badger 2026/06/02 08:01:43 INFO: Replaying file id: 0 at offset: 3199 badger 2026/06/02 08:01:43 INFO: Replay took: 2.836µs 2026/06/02 08:01:43 Building new tls configuration using step-ca x509 Signer Interface 2026/06/02 08:01:43 Starting Smallstep CA/0.28.4 (linux/amd64) 2026/06/02 08:01:43 Documentation: https://u.step.sm/docs/ca 2026/06/02 08:01:43 Community Discord: https://u.step.sm/discord 2026/06/02 08:01:43 Config file: /home/step/config/ca.json 2026/06/02 08:01:43 The primary server URL is https://localhost:9000 2026/06/02 08:01:43 Root certificates are available at https://localhost:9000/roots.pem 2026/06/02 08:01:43 Additional configured hostnames: 127.0.0.1 2026/06/02 08:01:43 X.509 Root Fingerprint: 726a79b25e86e2d2bc906b158479e0c7e11620fa9fff08d911b66286d5cdc53c 2026/06/02 08:01:43 Serving HTTPS on :9000 ... time="2026-06-02T08:02:06Z" level=info duration="156.578µs" duration-ns=156578 fields.time="2026-06-02T08:02:06Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=56b75a74-1f1e-41fc-ab34-3e454334243d size=16 status=200 user-agent=curl/8.5.0 user-id= time="2026-06-02T08:02:06Z" level=info duration="36.736µs" duration-ns=36736 fields.time="2026-06-02T08:02:06Z" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=172.31.102.33 request-id=cdc489f0-0544-4223-854b-b7266833cab5 size=16 status=200 user-agent=curl/8.5.0 user-id=