After a generated Thumbprint with New-PACertificate

bd8pq · February 5, 2020, 7:12pm

My domain is: www.duhar.se

I ran this command: New-PACertificate duhar.se -AcceptTOS

It produced this output: CN=duhar.se 2020-05-03 20:43:06 2048 AC30*…

What shall I do with that output? Is it a KEY or CERTIFICATE? How do I generate the vice verca?

stevenzhu · February 5, 2020, 7:15pm

Hi,

According to the tutorial on Github, the files (cert, key, chain) are all generated in the designated output folder.

github.com

rmbolger/Posh-ACME/blob/master/Tutorial.md#your-first-certificate

# Posh-ACME Tutorial

- [Picking a Server](#picking-a-server)
- [Your First Certificate](#your-first-certificate)
- [DNS Plugins](#dns-plugins)
- [Renewals and Deployment](#renewals-and-deployment)
- [Going Into Production](#going-into-production)
- [(Advanced) DNS Challenge Aliases](#advanced-dns-challenge-aliases)

## Picking a Server

Before we begin, let's configure our ACME server to be the Let's Encrypt *Staging* server. This will let us figure out all of the commands and parameters without likely running into the production server's [rate limits](https://letsencrypt.org/docs/rate-limits/). 

```powershell
Set-PAServer LE_STAGE
```

`LE_STAGE` is a shortcut for the Let's Encrypt Staging server's directory URL. You could do the same thing by specifying the actual URL which is https://acme-staging-v02.api.letsencrypt.org/directory. The other currently supported server shortcut is `LE_PROD` for the Let's Encrypt Production server. Any ACMEv2 compliant directory URL will work though.

Once you set a server, the module will continue to perform future actions against that server until you change it with another call to `Set-PAServer`. The first time you connect to a server, a link to its Terms of Service will be displayed. You should review it before continuing.

This file has been truncated. show original

You’ll need to find the output folder in your system and fetch the files.

Thank you

rmbolger · February 6, 2020, 5:38pm

Congrats on the new cert! That output is a PowerShell object that includes the details you saw on the screen in addition to others like the location of the cert/key files that were generated. The easiest way to find those files is to run Get-PACertificate | Format-List to show all of the properties from that original object.