95802947dd
Firefox rejected the self-signed cert because: 1. The issuer was a wildcard CN (not a valid CA) 2. Trust flags were C,, (not CT,,) Now generates a proper chain: - ca.crt/ca.key — CA with CN="Homelab CA, O=fhirworx" - homelab.crt/key — server cert signed by CA with SAN wildcard install_certs.sh updated to import ca.crt with CT,, flags.
21 lines
1.2 KiB
Plaintext
21 lines
1.2 KiB
Plaintext
-----BEGIN CERTIFICATE-----
|
|
MIIDTzCCAjegAwIBAgIUA6ONmnapagAZEkVJMOs50qjWmNcwDQYJKoZIhvcNAQEL
|
|
BQAwKDETMBEGA1UEAwwKSG9tZWxhYiBDQTERMA8GA1UECgwIZmhpcndvcngwHhcN
|
|
MjYwMzIxMjAzMDI5WhcNMzYwMzE4MjAzMDI5WjAgMR4wHAYDVQQDDBUqLmhvbWVs
|
|
YWIuZmhpcndvcnguaW8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk
|
|
yZZrB/IUL2E/BgEXM8uRMgV9P59wuz+m4FIZL4Zr6jUdVX0gyqchDxipyq3EoOHM
|
|
Eg4OHK75z/rrhIFqesXg+GML3qd8s+t8LJ9d2BDd2mvr4pQXf9jvBFd+rxJr8thA
|
|
lyjDkRWtpnaX3jRS5U0YcxXXMzji6+ENYkFyM2J3km9tEloj1hv69gFVCM79XjYf
|
|
Id2pLcIKkU4zv+kZ9VesWsQs4BBKArlyCNOO4/emn8h6ezo6w501AKeold9cRt7N
|
|
pUXA9a5eR+XjAzyAc0nMeoDZ7CCnyUwxHZMMyeNuxgi8BHq92cL4b2G7CQKKlqvP
|
|
349uzPo8TBeetr/VVlhJAgMBAAGjeTB3MDUGA1UdEQQuMCyCFSouaG9tZWxhYi5m
|
|
aGlyd29yeC5pb4ITaG9tZWxhYi5maGlyd29yeC5pbzAdBgNVHQ4EFgQUjnPOWk81
|
|
NtrM9ES2ch+uUtpb178wHwYDVR0jBBgwFoAUYMR/jxNnLBKBKJvTfsy3LZVpc64w
|
|
DQYJKoZIhvcNAQELBQADggEBAGavs2drAc+a7B4hGuIOwaRgIUmqjoIipXJHXwQt
|
|
5ZsLoBOR7ybqKfYidwnYqvfSdbVFlE/vu+81nTAFe+2TmndaZ7IndeVojOWoSvie
|
|
ritNiTjrOhjTX35QJ/OIfux0kVNWYqwMJNkhK6OKe7NOcGpev9nPp9xKDI9yYIHp
|
|
VMOEKTbhxBk+dBjkn8FyzTyRersTqFxqNtCBrMsCoDNWvNsWIVStw26QTfnkJ36r
|
|
dG3ar1doUBxykjHUigOLC+JAOVQSVaWj2ZSz6nPTITnCGzZyc+OWzHtPnFF8kY2O
|
|
dOc+Ob2Kyy5ZJvYrmoXBp0qg42VbP0qOgzjpN4lfd2hkZeU=
|
|
-----END CERTIFICATE-----
|