for demo purposes only.
For a production cluster setup, it is highly recommended to use a production-ready CA, such as
<a href=https://www.hashicorp.com/products/vault>Hashicorp Vault</a>.
It is a good practice to manage the root CA on an offline machine with strong
security protection.</div></aside></div><div><aside class="callout warning"><div class=type><svg class="large-icon"><use xlink:href="/v1.19/img/icons.svg#callout-warning"/></svg></div><div class=content>Support for SHA-1 signatures is <a href=ht