Skip to content
Free public beta until December 4, 2026: every course is open, no card needed. After that, the first chapter of each course stays free and full access is a one-time $39 ($19 for up to 100 founding members chosen for helpful feedback). Your progress is kept. How the beta works

trust store

The root certificates a device trusts, installed in advance.

A trust store is the set of root CA certificates a client accepts as anchors for chain validation; changing it is how a fleet stops trusting a CA.

Examples

  • A greenhouse node might hold only the site's private CA root in its trust store, so it trusts no other broker.

  • Pinning a public CA bundle instead puts hundreds of roots in the trust store, any one of which could sign a certificate for the broker's name.

See also

certificate chain Subject Alternative Name certificate authority
Read the full section →