ca.smooker.org -- the smooker.org PKI
Certificate revocation lists and CA certificates of the smooker.org private PKI (IANA PEN 65488). Nothing here is secret; nothing here issues anything.
Root CA
| subject | CN=smooker.org Root CA |
|---|---|
| certificate | /ca.crt (PEM) |
| sha256 | @ROOT_SHA256@ |
| CRL | http://ca.smooker.org/crl/root.crl (DER) |
Sub-CA mqtt.smooker.org
| subject | CN=mqtt.smooker.org CA |
|---|---|
| certificate | /mqtt.smooker.org.crt (PEM) |
| chain | /mqtt.smooker.org.chain.pem (sub-CA + root, PEM) |
| CRL | http://ca.smooker.org/crl/mqtt.smooker.org.crl (DER) |
| issues | client certificates for mqtt.smooker.org |
The CRLs are served over plain HTTP on purpose: they are signed, and that address is the one written into the certificates.