Ous Trencats Certificate Authority
You probably are not interested in this page.
Root Certificate
Link
Download this link, do not just click on it:
Link
Fingerprint
- openssl x509 -noout -fingerprint -sha256 -inform pem -in [certificate-file.crt]
- SHA256 Fingerprint=BD:6D:A4:15:63:16:98:E9:20:1A:22:BF:71:95:94:DB:1C:4A:28:B8:D9:07:ED:44:27:86:35:50:49:B9:83:24
- openssl x509 -noout -fingerprint -sha256 -inform pem -in [certificate-file.crt]
- MD5 Fingerprint=68:0C:BE:17:7A:4D:8B:75:81:23:E3:7C:B8:2A:B6:1B
Signing Certificate
Link
Download this link, do not just click on it:
Link
Fingerprint
- openssl x509 -noout -fingerprint -sha256 -inform pem -in [certificate-file.crt]
- SHA256 Fingerprint=6C:4B:02:E6:FE:FA:36:F2:E7:A6:16:16:84:0D:82:D0:6F:18:E1:BC:B7:45:BB:8C:5C:EC:03:F1:DE:E7:87:05
Notes
-
Website Cert chains: the web "cert" is actually the web cert followed by any signer certs up to
but not including the root cert.
-
SAN Certs
- Support:
Safari doesn't require them, but Chrome does
- Format:
The common name is mostly ignored, all site names must be in the SAN section
-
Root Cert Installation
-
Mac OS X: Open Keychain Access, choose System, File->Import Items, and the after it
is imported, right click on the cert, get info, open the trust section and always trust.
-
Android:
- Send the root cert as an attachment to an e-mail.
- On the phone, download the attachment (not to google drive, and don't open the attachment)
- Lock Screen and Security->Other Security Settings->Install from device storage
- Choose a good nae
-
Thunderbird:
- Thunderbird->Preferences
- Advanced
- Manage Certificates
- Import
- Select all for trust