AMSA Internal Root CA

This certificate is the trust anchor for AMSA internal HTTPS services (e.g. *.amsa.local). Installing it lets your device trust those sites without warnings. It is a public certificate; no private key is exposed.

Download AMSA-CA Root (.crt)  PEM

Verify before installing (this page is served over HTTP):
SHA-256: AF:DF:4C:AC:BC:19:57:BE:8C:D7:F9:8C:0E:DB:2E:2B:1F:71:48:6B:34:02:F3:8B:59:BA:0B:80:FC:EE:03:02
SHA-1: 0F:5D:C2:1E:A7:A9:C1:66:3D:29:ED:E2:2F:D0:E3:97:83:61:47:31

Windows

  1. Save the .crt, right-click → Install Certificate.
  2. Store location: Local Machine → Place all certificates in the following store → Trusted Root Certification Authorities.
  3. Confirm the SHA-256 thumbprint matches above.

macOS

  1. Double-click the .crt to add it to Keychain Access (System).
  2. Find "AMSA-CA Root CA", open it, expand Trust, set Always Trust.

Linux (Debian/Ubuntu)

sudo cp amsa-ca-root.crt /usr/local/share/ca-certificates/ && sudo update-ca-certificates

Linux (RHEL/openSUSE)

sudo cp amsa-ca-root.crt /etc/pki/trust/anchors/ && sudo update-ca-certificates

Firefox

Settings → Privacy & Security → Certificates → View Certificates → Authorities → Import → select the .crt → check "Trust this CA to identify websites". (Firefox uses its own store, separate from the OS.)

AMSA / GTPY internal PKI · questions: your IT contact.