<?xml version="1.0" encoding="utf-8"?><feed xmlns="http://www.w3.org/2005/Atom" ><generator uri="https://jekyllrb.com/" version="4.1.1">Jekyll</generator><link href="https://wejn.org/feed/by_tag/x509.xml" rel="self" type="application/atom+xml" /><link href="https://wejn.org/" rel="alternate" type="text/html" /><updated>2026-01-28T22:33:22+01:00</updated><id>https://wejn.org/feed/by_tag/x509.xml</id><title type="html">Wejn.org</title><subtitle>Wejn's corner on the interwebs, containing articles about computers (Linux), programming, system administration, and whatever else takes my fancy.</subtitle><author><name>Michal Jirků</name></author><entry><title type="html">Running one’s own root Certificate Authority in 2023</title><link href="https://wejn.org/2023/09/running-ones-own-root-certificate-authority-in-2023/" rel="alternate" type="text/html" title="Running one’s own root Certificate Authority in 2023" /><published>2023-09-16T14:23:00+02:00</published><updated>2023-09-17T11:50:35+02:00</updated><id>https://wejn.org/2023/09/running-ones-own-root-certificate-authority-in-2023</id><author><name>Michal Jirků</name></author><category term="unix" /><category term="sysadm" /><category term="x509" /><category term="internet" /><category term="security" /><summary type="html">Update 2023-09-17: Well, hello Hacker News! (comments) I also added nameConstraints to the cacert.sh to make this even better than before. Yay, constructive feedback!</summary></entry></feed>