ca.tjo.cloud

What domains are covered by the CA?

This CA for now only covers the internal. TLD. In the future, we might cover more.

How to get ACME certificates?

Example with Caddy

{
  # Either Public DNS (servied via LetsEncrypt Cert)
  # acme_ca https://ca.tjo.cloud/acme/v1/directory
  # Or Internal DNS (served via ca.tjo.cloud Cert)
  # acme_ca https://ca.cloud.internal/acme/v1/directory

  # Download from https://ca.tjo.cloud/roots.pem
  acme_ca_root /path/to/ca-tjo-cloud/roots.pem
}

example.internal {
  respond "Hello, world!"
}

Configuring Linux to accept CA

sudo mkdir -p /usr/local/share/ca-certificates/ca-tjo-cloud
sudo curl -sLo /usr/local/share/ca-certificates/ca-tjo-cloud/roots.pem https://ca.tjo.cloud/roots.pem
sudo update-ca-certificates

Root Fingerprint:

b7fd933541ee1001e1b480353a03690881fd0c50518c8aa67608944675cac875

Root Certificate:

Also accessible at /roots.pem