Ous Trencats Certificate Authority

You probably are not interested in this page.

Root Certificate

Link

Download this link, do not just click on it:
Link

Fingerprint

• openssl x509 -noout -fingerprint -sha256 -inform pem -in [certificate-file.crt]
• SHA256 Fingerprint=BD:6D:A4:15:63:16:98:E9:20:1A:22:BF:71:95:94:DB:1C:4A:28:B8:D9:07:ED:44:27:86:35:50:49:B9:83:24
• openssl x509 -noout -fingerprint -sha256 -inform pem -in [certificate-file.crt]
• MD5 Fingerprint=68:0C:BE:17:7A:4D:8B:75:81:23:E3:7C:B8:2A:B6:1B

Signing Certificate

Link

Download this link, do not just click on it:
Link

Fingerprint

• openssl x509 -noout -fingerprint -sha256 -inform pem -in [certificate-file.crt]
• SHA256 Fingerprint=6C:4B:02:E6:FE:FA:36:F2:E7:A6:16:16:84:0D:82:D0:6F:18:E1:BC:B7:45:BB:8C:5C:EC:03:F1:DE:E7:87:05

Notes

• Website Cert chains: the web "cert" is actually the web cert followed by any signer certs up to but not including the root cert.
• SAN Certs
  • Support:
  Safari doesn't require them, but Chrome does
  • Format:
  The common name is mostly ignored, all site names must be in the SAN section
• Root Cert Installation
  • Mac OS X: Open Keychain Access, choose System, File->Import Items, and the after it is imported, right click on the cert, get info, open the trust section and always trust.
  • Android:
    • Send the root cert as an attachment to an e-mail.
    • On the phone, download the attachment (not to google drive, and don't open the attachment)
    • Lock Screen and Security->Other Security Settings->Install from device storage
    • Choose a good nae
  • Thunderbird:
    • Thunderbird->Preferences
    • Advanced
    • Manage Certificates
    • Import
    • Select all for trust