Home CA root certificate

Install this once on each device so it trusts the internal services signed by this CA.

1. Check the fingerprint

SHA-256 fingerprint of the real root certificate F3:B7:8F:0D:63:0D:C5:A4:0E:8A:D3:9C:1C:7E:D8:0C:17:7A:07:21:EB:9D:A0:BE:62:11:8E:3E:30:E4:2D:45

Compare it with the value you were given in person or by message, not only with this page. Anyone who can alter this page can alter the fingerprint shown on it. Your computer can print the fingerprint of the file you downloaded:

openssl x509 -noout -fingerprint -sha256 -in root_ca.crt

2. Download

Certificate (.crt) iPhone / iPad / Mac profile

3. Install

iPhone / iPad
  1. Open the profile link above in Safari and allow the download.
  2. Settings → Profile Downloaded → Install.
  3. Settings → General → About → Certificate Trust Settings → turn on full trust for this certificate. Without this step the certificate is installed but not trusted.
Mac
  1. Open the downloaded .mobileconfig, then System Settings → Privacy & Security → Profiles → Install.
  2. Or in Terminal: sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain root_ca.crt
Windows
  1. Double-click root_ca.crt → Install Certificate.
  2. Choose Local Machine, then Place all certificates in the following store → Trusted Root Certification Authorities.
Linux (Debian / Ubuntu) 
sudo cp root_ca.crt /usr/local/share/ca-certificates/home-ca.crt
sudo update-ca-certificates

Firefox keeps its own list: Settings → Privacy & Security → Certificates → View Certificates → Authorities → Import.

Android

Settings → Security (or Biometrics and security) → Encryption and credentials → Install a certificate → CA certificate. Menu names differ between phones.

Only install a certificate if you trust whoever runs this network. A trusted root can vouch for any site it is allowed to sign for. Generated 2026-11-04.