证书 ca

XCA
step

step

step certificate create --profile root-ca "Example Root CA" root_ca.crt root_ca.key --kty RSA --size 2048 --no-password --insecure
step certificate create "Example Intermediate CA 1" intermediate_ca.crt intermediate_ca.key --profile intermediate-ca --ca root_ca.crt --ca-key root_ca.key --kty RSA --size 2048 --no-password --insecure
step certificate create example example.com.crt example.com.key --profile leaf --not-after=8760h --ca intermediate_ca.crt --ca-key intermediate_ca.key --san example.com --san *.example.com --san 127.0.0.1 --san localhost --bundle --kty RSA --size 2048 --no-password --insecure

step certificate install -all root_ca.crt
step certificate uninstall -all root_ca.crt

step certificate verify example.com.crt --roots root_ca.crt
step certificate inspect example.com.crt --short
step certificate inspect https://smallstep.com --format json
step certificate inspect https://smallstep.com --format pem --bundle

step certificate create --profile root-ca "cloud Root CA" --not-after=87600h root_ca.crt root_ca.key

step certificate create "cloud Intermediate CA 1" --not-after=87600h intermediate_ca.crt intermediate_ca.key --profile intermediate-ca --ca ./root_ca.crt --ca-key ./root_ca.key

step certificate create cloud.com cloud.com.crt cloud.com.key --profile leaf --not-after=87600h --san=cloud.com --san=*.cloud.com --ca ./intermediate_ca.crt --ca-key ./intermediate_ca.key --bundle

step certificate format foo.pem --out foo.der

$ step certificate install root-ca.crt

openssl ec -in key.pem -out keydec.pem