Bluecrow Certificate Authorities

Downloading the public root certificate

Click here to download the Bluecrow EC CA 2023 public root certificate.

Click here to download the Bluecrow RSA CA 2023 public root certificate.

Installing the public root certificate in Windows using PowerShell

To install the Bluecrow EC CA 2023 public root certificate in Windows using PowerShell, do the following:

Hover your mouse above the code below and click the Copy button that appears. This will put the PowerShell script in your clipboard buffer.
Open a PowerShell console window. Depending on your system, you may need to use the Run As Administrator option.
In the PowerShell console window, right click to paste the code into the window. The code will automatically execute, downloading and installin the public root certificate.
Once complete, you should see a "Done!!!" message.
Close the PowerShell console.
The Bluecrow EC CA 2023 certificate authority has now been succesfully installed in your computers Trusted Certificate Authories certificate store.


try {
        Function Download-And-Install-Certificate($certUrl, $certFile, $certDescription) {
                try {
                "Downloading $certDescription certificate..."
                $start_time = Get-Date
                Invoke-WebRequest -Uri $certUrl -OutFile $certFile
                "Time taken: $((Get-Date).Subtract($start_time).Seconds) second(s)"
                }
                catch {
                        Write-Warning -Message "An error occurred downloading the file: ${$_}"
                }


                try {
                        "Importing $certDescription from file $certFile to LocalMachine Trusted Roots..."
                        Import-Certificate -FilePath "$certFile" -CertStoreLocation Cert:\LocalMachine\Root
                        "Cleaning up..."
                        Remove-Item "$certFile"
                        "Done!!!"
                }
                catch {
                        Write-Warning -Message "An error occurred importing the certificate: $_"
                }
                ''
                ''
                ''
        }

        Download-And-Install-Certificate 'https://ca.bluecrow.net/pki/bc-ec-ca-2023.crt' 'bc-ec-ca-2023.crt' 'Bluecrow EC CA 2023'
        Download-And-Install-Certificate 'https://ca.bluecrow.net/pki/bc-rsa-ca-2023.crt' 'bc-rsa-ca-2023.crt' 'Bluecrow RSA CA 2023'
}
catch {
        Write-Warming -Message "An unexpected error occurred!!!"
}

Installing the public root certificate on a Mikrotik router

{
        /tool fetch url=http://ca.bluecrow.net/pki/bc-ec-ca-2023.crt
        :delay 1
        /certificate import file-name=bc-ec-ca-2023.crt passphrase=""
        /certificate set [find where common-name="Bluecrow EC CA 2023"] name="Bluecrow EC CA 2023"
        /file remove bc-ec-ca-2023.crt
}

{
        /tool fetch url=http://ca.bluecrow.net/pki/bc-rsa-ca-2023.crt
        :delay 1
        /certificate import file-name=bc-rsa-ca-2023.crt passphrase=""
        /certificate set [find where common-name="Bluecrow RSA CA 2023"] name="Bluecrow RSA CA 2023"
        /file remove bc-rsa-ca-2023.crt
}

Installing the public root certificate on Ubuntu

sudo apt-get install -y ca-certificates && \
wget https://ca.bluecrow.net/pki/bc-ec-ca-2023.crt && \
wget https://ca.bluecrow.net/pki/bc-rsa-ca-2023.crt && \
sudo cp bc-ec-ca-2023.crt /usr/local/share/ca-certificates && \
sudo cp bc-rsa-ca-2023.crt /usr/local/share/ca-certificates && \
sudo update-ca-certificates

Installing the public root certificate on Ubuntu for use by Chrome/Chromium/Edge

Chrome/Chromium/Edge use a keystore in ~/.pki. They do not use the system certificate store. You need the certutil utility program to import the root certificate into the keystore. This is a per-user keystore.

sudo apt install libnss3-tools && \
wget https://ca.bluecrow.net/pki/bc-ec-ca-2023.crt && \
wget https://ca.bluecrow.net/pki/bc-rsa-ca-2023.crt && \
certutil -d sql:$HOME/.pki/nssdb -A -t "CT,C,C" -n "Bluecrow EC CA 2023" -i bc-ec-ca-2023.crt && \
certutil -d sql:$HOME/.pki/nssdb -A -t "CT,C,C" -n "Bluecrow RSA CA 2023" -i bc-rsa-ca-2023.crt && \
certutil -d sql:$HOME/.pki/nssdb -L

Cached third party CA root certificates

DigiCert Global Root CA - Valid until: 10/Nov/2031 - https://www.digicert.com/kb/digicert-root-certificates.htm

GoDaddy Root G2 - https://certs.godaddy.com/repository

IdentTrust TrustID X3 - For Letsencrypt support https://www.identrust.com/support/downloads