BACK TO TELEGRAPH HOME
BLAXSTAR TELEGRAPH

CORP CA

Install the BLAXSTAR LLC Root CA to access internal BLAXSTAR services over trusted TLS (HTTPS).

Quick install — Linux / macOS
shell
curl -fsSL https://telegraph.blaxstar.net/corp-ca/install.sh | sh

Downloads the CA, verifies the SHA-256 below, installs it into the system trust store, and (if certutil is present) Chrome/Firefox too. Inspect it first if you like: curl -fsSL …/install.sh | less.

Verify — pinned SHA-256 fingerprint
19:55:9A:AA:38:9D:40:19:49:9F:04:5F:0F:71:77:58:05:13:F1:21:4C:1E:14:7F:C5:A6:53:B4:AC:C6:4A:14

After downloading, confirm it matches: openssl x509 -in blaxstar-root-ca.crt -noout -fingerprint -sha256

Manual install
DOWNLOAD blaxstar-root-ca.crt
Debian / Ubuntu 
sudo cp blaxstar-root-ca.crt /usr/local/share/ca-certificates/
sudo update-ca-certificates
RHEL / Fedora 
sudo cp blaxstar-root-ca.crt /etc/pki/ca-trust/source/anchors/
sudo update-ca-trust extract
Arch Linux 
sudo trust anchor --store blaxstar-root-ca.crt
macOS 
sudo security add-trusted-cert -d -r trustRoot \
  -k /Library/Keychains/System.keychain blaxstar-root-ca.crt
Windows 
certutil -addstore -f Root blaxstar-root-ca.crt
# (Run as Administrator)
Chrome / Chromium & Firefox (Linux) 
sudo apt install libnss3-tools
# Chrome/Chromium:
certutil -d sql:$HOME/.pki/nssdb -A -t "C,," -n "BLAXSTAR LLC Root CA" -i blaxstar-root-ca.crt
# Firefox: Settings → Certificates → Authorities → Import → trust for websites

Verify it worked: curl -sSI https://telegraph.corp.blaxstar.net | head -1