🔑

ca.tjo.cloud

Hi! You can get information about tjo.cloud Certificate Authority (CA) here.

What domains are covered by the CA?

This CA for now only covers the internal. TLD. In the future, we might cover more.

How to get ACME certificates?

Example with Caddy

{
  # Either Public DNS (servied via LetsEncrypt Cert)
  # acme_ca https://ca.tjo.cloud/acme/ca-tjo-cloud/directory
  # Or Internal DNS (served via ca.tjo.cloud Cert)
  # acme_ca https://ca.cloud.internal/acme/ca-tjo-cloud/directory

  # Download from https://ca.tjo.cloud/root.crt
  acme_ca_root /path/to/ca-tjo-cloud/root.crt
}

example.internal {
  respond "Hello, world!"
}

Configuring Linux to accept CA

sudo mkdir -p /usr/local/share/ca-certificates/ca-tjo-cloud
sudo curl -sLo /usr/local/share/ca-certificates/ca-tjo-cloud/root.crt https://ca.tjo.cloud/root.crt
sudo update-ca-certificates

Root Fingerprint:

6435a62157d89f57f90f2a69ce51bcb44acad1978c827aa53a8f530803e79575

Root Certificate:

Also accessible at /root.crt

-----BEGIN CERTIFICATE-----
MIIBcTCCARegAwIBAgIRAIal77ic7mivE4JKGslFuyAwCgYIKoZIzj0EAwIwFzEV
MBMGA1UEAxMMY2EudGpvLmNsb3VkMCAXDTI2MDIwNTEzMzIyOVoYDzIwNTEwMzEz
MDUzMjI5WjAXMRUwEwYDVQQDEwxjYS50am8uY2xvdWQwWTATBgcqhkjOPQIBBggq
hkjOPQMBBwNCAATtHj0lv+Kfeg9EDjgsafUx26m3E5oBEn6Flfqm5BBncpXxZ9pb
aDIojpKUOzaDt+DuGtc0CtIlFLXo0tA7Iq8Uo0IwQDAOBgNVHQ8BAf8EBAMCAQYw
DwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU0AiKeHGdfZnOUFxnCQwaM2b0gGYw
CgYIKoZIzj0EAwIDSAAwRQIhALxPC0xE3ONHScAC9EgM9lIX8URprLq812lT46hX
XOjmAiBslbps9b1NqwUhz+fnwQQguQepUBYZXLc3iTD7qDdSyg==
-----END CERTIFICATE-----