Seemi Cloud certificate authorities
Published by Seemi Technology Group FZC
https://cloud.seemi.net/pki/

Use ca.pem as your trusted CA file. It contains every certificate listed below.

These CAs are technically restricted (X.509 name constraints) to names under
seemi.net and seemi.cloud. They cannot issue valid certificates for any
other domain, or for IP addresses.

CERTIFICATES

root-r1.pem / root-r1.der   (root CA)
  Subject:  CN=Seemi Cloud Root CA R1, O=Seemi Technology Group FZC, C=AE
  Valid:    2026-11-02 to 2051-11-02 (UTC)
  SHA-256:  D9:0C:AD:B9:59:DB:E5:05:3F:71:83:28:53:BE:9E:D7:CA:89:0C:76:97:8E:9E:3D:32:26:79:E5:44:D5:91:DA

ica-r1.pem / ica-r1.der   (issuing CA)
  Subject:  CN=Seemi Cloud Issuing CA R1, O=Seemi Technology Group FZC, C=AE
  Valid:    2026-11-02 to 2036-11-01 (UTC)
  SHA-256:  E2:CA:3A:0E:06:BB:61:5B:87:1A:4E:47:87:37:D0:EC:30:15:8E:58:D9:D5:26:BC:C0:15:96:0C:A4:8A:3E:A0

HOW TO USE

  Point your client at ca.pem as its trusted CA file, for example:
    mysql CLI:      --ssl-ca=ca.pem --ssl-mode=VERIFY_IDENTITY
    psql / libpq:   sslmode=verify-full sslrootcert=ca.pem
    MySqlConnector: SslMode=VerifyFull;SslCa=ca.pem
    Npgsql:         SSL Mode=VerifyFull;Root Certificate=ca.pem
    Node.js:        ssl: { ca: fs.readFileSync('ca.pem') }

  Windows machine-wide trust: import the root .der file into
  "Trusted Root Certification Authorities". Only the root, not the issuing CA.

VERIFYING THIS DOWNLOAD

  The SHA-256 checksum of each .der file equals the fingerprint listed above:
    sha256sum root-r1.der

  Compare fingerprints with the ones shown at https://cloud.seemi.net/pki/