services.md
... ...
@@ -0,0 +1,175 @@
1
+# SSL Certificate Authority
2
+
3
+acme.buzzster.dn42 is signed by an internally maintained CA that is only allowed to sign *.buzzster.dn42 domains.
4
+
5
+If you are required to specify a license to clarify redistribution, then it [can be considered](https://groups.io/g/dn42/message/844) as [CC0](https://creativecommons.org/public-domain/cc0/).
6
+
7
+The CA certificate ([dn42](https://buzzster.dn42/ca/buzzster-ca.pem):
8
+
9
+```
10
+Certificate:
11
+ Data:
12
+ Version: 3 (0x2)
13
+ Serial Number:
14
+ 7c:2e:70:2a:7e:0f:6b:93:aa:51:fb:e7:c5:94:0e:58:bb:a7:87:8c
15
+ Signature Algorithm: sha256WithRSAEncryption
16
+ Issuer: O = Buzzster Trust Services, CN = WR1
17
+ Validity
18
+ Not Before: Jul 8 21:49:07 2025 GMT
19
+ Not After : Jul 6 21:49:07 2035 GMT
20
+ Subject: O = Buzzster Trust Services, CN = WR1
21
+ Subject Public Key Info:
22
+ Public Key Algorithm: rsaEncryption
23
+ RSA Public-Key: (4096 bit)
24
+ Modulus:
25
+ 00:ec:b1:65:aa:9f:15:b9:c2:18:e1:fb:6f:e9:e9:
26
+ 45:40:e6:6f:cb:31:53:09:e2:6b:fa:e2:ef:78:84:
27
+ b4:a4:32:5d:94:81:d5:cd:5d:1b:5d:86:3e:8f:48:
28
+ ba:d5:ea:2b:ae:94:81:0a:79:56:07:dd:e1:7f:56:
29
+ f3:63:93:24:64:0f:e2:fa:e3:17:20:89:d3:d2:6d:
30
+ b6:6b:02:fa:85:44:de:76:c7:1c:04:ad:5e:b0:b7:
31
+ b5:ee:f7:bf:9c:d1:15:2d:f0:b5:87:88:7c:f1:3c:
32
+ 9a:7d:ef:88:d5:ea:b0:2e:bd:e9:71:70:92:83:3f:
33
+ 67:43:70:86:7c:45:45:71:65:73:d7:f3:bc:f9:6e:
34
+ a6:9a:91:20:62:58:d0:cf:77:f8:81:2d:03:5e:4e:
35
+ 82:4b:cb:f8:a1:37:2b:52:42:bb:e8:5a:4c:7c:eb:
36
+ 31:da:98:bf:bf:57:f6:69:93:d3:08:0a:af:c6:87:
37
+ d3:93:2b:a4:78:94:2a:82:44:3f:28:e1:13:1a:0b:
38
+ d6:64:3d:30:e4:06:a4:11:06:c9:88:ce:be:27:26:
39
+ 95:20:c3:91:38:4d:4f:c5:0d:73:90:23:0e:ee:58:
40
+ 10:4f:ff:eb:d4:5f:19:70:79:02:12:fd:b4:79:c7:
41
+ fd:0a:94:f3:d8:6d:f6:af:e0:f9:68:ee:34:be:23:
42
+ d5:c4:d0:9e:af:16:b9:43:8f:4e:42:db:00:c1:66:
43
+ 79:5f:01:f8:83:42:ff:4d:da:4b:28:ef:6e:b5:bf:
44
+ 28:32:31:f5:56:bc:ea:5d:a9:8b:03:63:84:1e:01:
45
+ 97:6f:6b:8f:5b:d5:d6:3b:88:e3:40:56:3d:8a:dd:
46
+ 29:82:7f:19:a9:49:c0:62:9a:5d:c2:dd:d3:49:af:
47
+ 87:fb:d4:41:65:f2:50:54:6f:9b:4a:62:b5:61:ee:
48
+ 0f:e0:e7:d3:81:b2:59:8f:30:e6:0b:c9:e9:8b:16:
49
+ 4b:bd:d4:d0:a1:39:1a:b9:43:a4:70:a6:01:de:03:
50
+ 0d:19:72:f6:91:2d:3f:ab:6a:03:82:05:3b:4a:09:
51
+ df:42:d5:2e:19:88:48:0b:fa:da:c6:78:99:76:3d:
52
+ 75:71:68:93:74:f0:c8:85:fb:34:fa:7e:d5:de:20:
53
+ 88:d7:cc:8c:4d:fa:a9:70:22:c7:88:b5:9d:6c:94:
54
+ ef:76:5c:c6:de:b1:bf:e3:91:4e:29:a6:f4:46:ab:
55
+ c9:75:13:bf:9a:37:a4:26:84:cd:0e:8c:16:fd:6b:
56
+ b4:1a:bb:d7:62:c6:90:5c:d7:7d:cc:0d:f0:83:21:
57
+ 5e:09:e7:e1:02:c9:41:7e:9e:8d:71:ac:a0:85:77:
58
+ 70:e6:bd:0a:34:5c:38:11:65:83:bf:a5:75:48:66:
59
+ d5:89:67
60
+ Exponent: 65537 (0x10001)
61
+ X509v3 extensions:
62
+ X509v3 Subject Key Identifier:
63
+ 8A:DF:E7:C9:3E:E5:73:2C:7C:21:D6:C8:4E:40:60:02:87:8B:F8:F3
64
+ X509v3 Authority Key Identifier:
65
+ keyid:8A:DF:E7:C9:3E:E5:73:2C:7C:21:D6:C8:4E:40:60:02:87:8B:F8:F3
66
+
67
+ X509v3 Basic Constraints: critical
68
+ CA:TRUE
69
+ Signature Algorithm: sha256WithRSAEncryption
70
+ 8f:0b:3c:56:06:42:ce:aa:48:86:1b:cd:20:57:41:36:04:b6:
71
+ e7:bc:2a:b4:65:35:ec:ea:66:3a:f0:e3:75:ab:81:ea:0c:97:
72
+ 4d:1b:d1:af:c1:c5:26:8e:ce:1c:b9:97:d1:e5:58:d7:8a:74:
73
+ 5e:80:d0:9f:c6:64:4f:58:ba:42:b0:6e:e7:f4:36:b2:c1:c8:
74
+ 92:6b:76:33:3d:7b:b3:f8:d5:82:28:35:ef:f7:e6:92:2f:9b:
75
+ fa:10:55:d5:92:be:50:d2:c5:ac:6b:d3:4c:d9:1a:02:5c:34:
76
+ b1:54:b4:ab:48:5b:fc:a7:17:b7:df:85:f3:2e:a6:00:02:e4:
77
+ 39:0d:f5:94:ee:e1:6c:ad:74:e0:27:3b:84:d2:9e:a7:a7:1d:
78
+ e3:dc:9e:67:a4:9b:61:6c:c4:63:5b:5c:86:4f:1b:e1:c3:96:
79
+ 44:1d:f0:95:4e:92:d0:20:68:35:08:4b:fc:76:84:ee:7c:2d:
80
+ 4c:90:25:4e:b3:c8:66:28:fa:92:cd:cd:7b:26:a4:a4:8e:31:
81
+ 78:0a:49:ce:52:33:98:55:3b:e3:6c:f6:4e:47:f6:f7:95:0d:
82
+ f7:29:16:f1:6e:7a:c4:34:27:63:9b:83:47:d5:7e:e6:eb:3a:
83
+ 2c:b1:b1:9d:4c:e4:63:3f:0e:54:3d:74:37:46:3d:37:18:1c:
84
+ 91:be:12:73:8f:88:06:06:2e:2f:da:a1:f8:dc:4d:d8:d9:b6:
85
+ 00:66:1f:e5:4d:aa:b3:a8:f2:9f:9c:52:e0:43:dd:cd:e4:ff:
86
+ 26:23:82:84:62:1a:13:f8:5b:b9:e1:57:f6:dc:7b:aa:e4:f9:
87
+ 8b:c1:4b:7e:cb:42:b1:42:de:2e:48:41:77:08:8a:22:63:56:
88
+ 68:c3:1b:87:0d:90:26:05:a8:b2:7d:75:81:66:e4:21:29:1a:
89
+ dc:a3:78:c9:28:a2:ec:4f:08:fc:4c:91:57:93:0f:46:1a:5d:
90
+ 92:4e:13:ea:aa:3b:71:1f:80:47:36:bc:e3:66:ee:55:97:1e:
91
+ 2b:d4:b3:f4:03:26:83:aa:0f:69:ad:13:55:60:41:7e:e3:88:
92
+ 31:d2:5d:50:c8:e1:55:80:8a:af:08:db:18:75:30:4d:f5:bf:
93
+ 66:ba:b1:95:f8:e2:86:6e:2a:80:18:41:66:9e:3d:bc:b2:3d:
94
+ 09:64:ae:03:45:4e:c1:f5:38:e9:2b:af:8c:0e:4b:bc:86:a6:
95
+ 95:54:63:07:e2:20:12:c6:cc:d4:73:87:8d:d9:5c:f5:a8:d0:
96
+ 2a:f7:0b:75:e6:c5:87:68:8b:a6:50:07:7b:9a:36:91:13:9f:
97
+ 77:01:8a:81:1a:78:dc:3f:be:b8:4c:57:1b:9c:62:f5:95:c5:
98
+ ae:97:0c:0b:e6:f0:7c:af
99
+-----BEGIN CERTIFICATE-----
100
+MIIFQTCCAymgAwIBAgIUfC5wKn4Pa5OqUfvnxZQOWLunh4wwDQYJKoZIhvcNAQEL
101
+BQAwMDEgMB4GA1UECgwXQnV6enN0ZXIgVHJ1c3QgU2VydmljZXMxDDAKBgNVBAMM
102
+A1dSMTAeFw0yNTA3MDgyMTQ5MDdaFw0zNTA3MDYyMTQ5MDdaMDAxIDAeBgNVBAoM
103
+F0J1enpzdGVyIFRydXN0IFNlcnZpY2VzMQwwCgYDVQQDDANXUjEwggIiMA0GCSqG
104
+SIb3DQEBAQUAA4ICDwAwggIKAoICAQDssWWqnxW5whjh+2/p6UVA5m/LMVMJ4mv6
105
+4u94hLSkMl2UgdXNXRtdhj6PSLrV6iuulIEKeVYH3eF/VvNjkyRkD+L64xcgidPS
106
+bbZrAvqFRN52xxwErV6wt7Xu97+c0RUt8LWHiHzxPJp974jV6rAuvelxcJKDP2dD
107
+cIZ8RUVxZXPX87z5bqaakSBiWNDPd/iBLQNeToJLy/ihNytSQrvoWkx86zHamL+/
108
+V/Zpk9MICq/Gh9OTK6R4lCqCRD8o4RMaC9ZkPTDkBqQRBsmIzr4nJpUgw5E4TU/F
109
+DXOQIw7uWBBP/+vUXxlweQIS/bR5x/0KlPPYbfav4Plo7jS+I9XE0J6vFrlDj05C
110
+2wDBZnlfAfiDQv9N2kso7261vygyMfVWvOpdqYsDY4QeAZdva49b1dY7iONAVj2K
111
+3SmCfxmpScBiml3C3dNJr4f71EFl8lBUb5tKYrVh7g/g59OBslmPMOYLyemLFku9
112
+1NChORq5Q6RwpgHeAw0ZcvaRLT+ragOCBTtKCd9C1S4ZiEgL+trGeJl2PXVxaJN0
113
+8MiF+zT6ftXeIIjXzIxN+qlwIseItZ1slO92XMbesb/jkU4ppvRGq8l1E7+aN6Qm
114
+hM0OjBb9a7Qau9dixpBc133MDfCDIV4J5+ECyUF+no1xrKCFd3DmvQo0XDgRZYO/
115
+pXVIZtWJZwIDAQABo1MwUTAdBgNVHQ4EFgQUit/nyT7lcyx8IdbITkBgAoeL+PMw
116
+HwYDVR0jBBgwFoAUit/nyT7lcyx8IdbITkBgAoeL+PMwDwYDVR0TAQH/BAUwAwEB
117
+/zANBgkqhkiG9w0BAQsFAAOCAgEAjws8VgZCzqpIhhvNIFdBNgS257wqtGU17Opm
118
+OvDjdauB6gyXTRvRr8HFJo7OHLmX0eVY14p0XoDQn8ZkT1i6QrBu5/Q2ssHIkmt2
119
+Mz17s/jVgig17/fmki+b+hBV1ZK+UNLFrGvTTNkaAlw0sVS0q0hb/KcXt9+F8y6m
120
+AALkOQ31lO7hbK104Cc7hNKep6cd49yeZ6SbYWzEY1tchk8b4cOWRB3wlU6S0CBo
121
+NQhL/HaE7nwtTJAlTrPIZij6ks3NeyakpI4xeApJzlIzmFU742z2Tkf295UN9ykW
122
+8W56xDQnY5uDR9V+5us6LLGxnUzkYz8OVD10N0Y9Nxgckb4Sc4+IBgYuL9qh+NxN
123
+2Nm2AGYf5U2qs6jyn5xS4EPdzeT/JiOChGIaE/hbueFX9tx7quT5i8FLfstCsULe
124
+LkhBdwiKImNWaMMbhw2QJgWosn11gWbkISka3KN4ySii7E8I/EyRV5MPRhpdkk4T
125
+6qo7cR+ARza842buVZceK9Sz9AMmg6oPaa0TVWBBfuOIMdJdUMjhVYCKrwjbGHUw
126
+TfW/Zrqxlfjihm4qgBhBZp49vLI9CWSuA0VOwfU46SuvjA5LvIamlVRjB+IgEsbM
127
+1HOHjdlc9ajQKvcLdebFh2iLplAHe5o2kROfdwGKgRp43D++uExXG5xi9ZXFrpcM
128
+C+bwfK8=
129
+-----END CERTIFICATE-----
130
+```
131
+
132
+## Importing the certificate
133
+
134
+- cacert have a comprehensive FAQ on how to import your own root certificates in [browsers](http://wiki.cacert.org/FAQ/BrowserClients) and [other software](http://wiki.cacert.org/FAQ/ImportRootCert)
135
+
136
+#### Manual Installation
137
+
138
+```bash
139
+$ mkdir /usr/share/ca-certificates/extra
140
+$ cat > /usr/share/ca-certificates/extra/buzzster.crt <<EOF
141
+-----BEGIN CERTIFICATE-----
142
+MIIFQTCCAymgAwIBAgIUfC5wKn4Pa5OqUfvnxZQOWLunh4wwDQYJKoZIhvcNAQEL
143
+BQAwMDEgMB4GA1UECgwXQnV6enN0ZXIgVHJ1c3QgU2VydmljZXMxDDAKBgNVBAMM
144
+A1dSMTAeFw0yNTA3MDgyMTQ5MDdaFw0zNTA3MDYyMTQ5MDdaMDAxIDAeBgNVBAoM
145
+F0J1enpzdGVyIFRydXN0IFNlcnZpY2VzMQwwCgYDVQQDDANXUjEwggIiMA0GCSqG
146
+SIb3DQEBAQUAA4ICDwAwggIKAoICAQDssWWqnxW5whjh+2/p6UVA5m/LMVMJ4mv6
147
+4u94hLSkMl2UgdXNXRtdhj6PSLrV6iuulIEKeVYH3eF/VvNjkyRkD+L64xcgidPS
148
+bbZrAvqFRN52xxwErV6wt7Xu97+c0RUt8LWHiHzxPJp974jV6rAuvelxcJKDP2dD
149
+cIZ8RUVxZXPX87z5bqaakSBiWNDPd/iBLQNeToJLy/ihNytSQrvoWkx86zHamL+/
150
+V/Zpk9MICq/Gh9OTK6R4lCqCRD8o4RMaC9ZkPTDkBqQRBsmIzr4nJpUgw5E4TU/F
151
+DXOQIw7uWBBP/+vUXxlweQIS/bR5x/0KlPPYbfav4Plo7jS+I9XE0J6vFrlDj05C
152
+2wDBZnlfAfiDQv9N2kso7261vygyMfVWvOpdqYsDY4QeAZdva49b1dY7iONAVj2K
153
+3SmCfxmpScBiml3C3dNJr4f71EFl8lBUb5tKYrVh7g/g59OBslmPMOYLyemLFku9
154
+1NChORq5Q6RwpgHeAw0ZcvaRLT+ragOCBTtKCd9C1S4ZiEgL+trGeJl2PXVxaJN0
155
+8MiF+zT6ftXeIIjXzIxN+qlwIseItZ1slO92XMbesb/jkU4ppvRGq8l1E7+aN6Qm
156
+hM0OjBb9a7Qau9dixpBc133MDfCDIV4J5+ECyUF+no1xrKCFd3DmvQo0XDgRZYO/
157
+pXVIZtWJZwIDAQABo1MwUTAdBgNVHQ4EFgQUit/nyT7lcyx8IdbITkBgAoeL+PMw
158
+HwYDVR0jBBgwFoAUit/nyT7lcyx8IdbITkBgAoeL+PMwDwYDVR0TAQH/BAUwAwEB
159
+/zANBgkqhkiG9w0BAQsFAAOCAgEAjws8VgZCzqpIhhvNIFdBNgS257wqtGU17Opm
160
+OvDjdauB6gyXTRvRr8HFJo7OHLmX0eVY14p0XoDQn8ZkT1i6QrBu5/Q2ssHIkmt2
161
+Mz17s/jVgig17/fmki+b+hBV1ZK+UNLFrGvTTNkaAlw0sVS0q0hb/KcXt9+F8y6m
162
+AALkOQ31lO7hbK104Cc7hNKep6cd49yeZ6SbYWzEY1tchk8b4cOWRB3wlU6S0CBo
163
+NQhL/HaE7nwtTJAlTrPIZij6ks3NeyakpI4xeApJzlIzmFU742z2Tkf295UN9ykW
164
+8W56xDQnY5uDR9V+5us6LLGxnUzkYz8OVD10N0Y9Nxgckb4Sc4+IBgYuL9qh+NxN
165
+2Nm2AGYf5U2qs6jyn5xS4EPdzeT/JiOChGIaE/hbueFX9tx7quT5i8FLfstCsULe
166
+LkhBdwiKImNWaMMbhw2QJgWosn11gWbkISka3KN4ySii7E8I/EyRV5MPRhpdkk4T
167
+6qo7cR+ARza842buVZceK9Sz9AMmg6oPaa0TVWBBfuOIMdJdUMjhVYCKrwjbGHUw
168
+TfW/Zrqxlfjihm4qgBhBZp49vLI9CWSuA0VOwfU46SuvjA5LvIamlVRjB+IgEsbM
169
+1HOHjdlc9ajQKvcLdebFh2iLplAHe5o2kROfdwGKgRp43D++uExXG5xi9ZXFrpcM
170
+C+bwfK8=
171
+-----END CERTIFICATE-----
172
+EOF
173
+$ echo "extra/buzzster.crt" >> /etc/ca-certificates.conf
174
+$ update-ca-certificates
175
+```
... ...
\ No newline at end of file