證書 ca

XCA
step

step

step certificate create --profile root-ca "Example Root CA" root_ca.crt root_ca.key --kty RSA --size 2048 --no-password --insecure
step certificate create "Example Intermediate CA 1" intermediate_ca.crt intermediate_ca.key --profile intermediate-ca --ca root_ca.crt --ca-key root_ca.key --kty RSA --size 2048 --no-password --insecure
step certificate create example example.com.crt example.com.key --profile leaf --not-after=8760h --ca intermediate_ca.crt --ca-key intermediate_ca.key --san example.com --san *.example.com --san 127.0.0.1 --san localhost --bundle --kty RSA --size 2048 --no-password --insecure

step certificate install -all root_ca.crt
step certificate uninstall -all root_ca.crt

step certificate verify example.com.crt --roots root_ca.crt
step certificate inspect example.com.crt --short
step certificate inspect https://smallstep.com --format json
step certificate inspect https://smallstep.com --format pem --bundle