# Promethix PKI Material

This directory publishes public Promethix X.509 trust anchors and intermediate
certificate authorities.

## Published Certificates

- `promethix-root-ca.crt`
- `promethix-intermediate-ca.crt`
- `promethix-vault-intermediate-ca.crt`
- `promethix-ca-bundle.crt`

## Verify Downloads

```sh
curl -fsSLO https://trust.promethix.dev/pki/promethix-root-ca.crt
curl -fsSLO https://trust.promethix.dev/pki/promethix-root-ca.crt.sha256
sha256sum -c promethix-root-ca.crt.sha256
```

Repeat the same pattern for the intermediate CAs and bundle as needed.

## Notes

- The official private Promethix Root CA is self-signed.
- The intermediate CAs chain back to the Promethix root CA.
- The bundle file is ordered:
  1. Promethix Vault Intermediate CA
  2. Promethix Intermediate CA
  3. Promethix Root CA