v3.24.1

Getting Started Devices Gateways Integrations Reference
Get The Things Stack

Reference

    Overview
  • Adaptive Data Rate
  • API
  • Application Packages
  • Billing with Stripe
  • Command-Line Interface
  • Components
  • Configuration
  • Data Formats
  • Data Retention and Privacy
  • Device Claiming Configuration
  • Email Templates
  • Federated Authentication
  • Frequency Plans
  • FUOTA
  • Gateway RTT
  • Glossary
  • ID and EUI Constraints
  • Last Activity
  • LoRa Basics Station Implementation Guide
  • LoRaWAN Join Server Configuration
  • LoRaWAN Specification and Regional Parameters
  • Networking
  • Packet Broker Routing
  • Packet Forwarders
  • Purging Entities
  • Rate Limiting
  • Resource Limiting
  • Root Certificates
  • Telemetry
  • Tenant Management
  • Web UI Branding

Root Certificates

This section contains links to common root SSL certificates used in The Things Stack, issued by trusted certificate authorities (CAs).

Which Certificate Is Right For My Deployment?

The complete certificate list contains all CA certificates trusted by modern browsers, so if you use certificates issued by a popular CA, you should be covered by this one.

The minimal certificate list contains a tailored list of certificates used in standard The Things Stack deployments for devices which do not support the larger list due to memory constraints.

Unfortunately, some gateways do not support concatenated certificate lists at all. If your device will not connect using the complete or minimal certificate lists, you must use the specific certificate you use to configure TLS for your domain. If you use Let’s Encrypt, use the Let’s Encrypt ISRG Root X1.

Complete Certificate List

This .pem file contains all common CA certificates trusted by Mozilla, and is extracted and hosted by curl.

Download the complete certificate list from curl here.

Minimal Certificate List for Common Installations

This .pem file contains certificates used in standard The Things Stack deployments, and is small enough to fit on memory constrained devices such as Gateways. This list includes the following CA certificates:

  • ISRG Root X1
  • Baltimore CyberTrust Root
  • Amazon Root CA 1, 2, 3 and 4
  • The Things Industries Root CA

Download the minimal certificate list here.

Let’s Encrypt

ISRG Root X1

Many The Things Stack deployments use the Let’s Encrypt ISRG Root X1 Trust. If using Let’s Encrypt to secure your domain, you may download the ISRG Root X1 Trust file here.

← Resource Limiting Telemetry →

On this page

  • Which Certificate Is Right For My Deployment?
  • Complete Certificate List
  • Minimal Certificate List for Common Installations
  • Let’s Encrypt

The Things Stack

Getting Started

Devices

Gateways

Integrations

Reference

Contributing

GitHub

Forum

About Us

The Things Network

The Things Industries

About this page

Last changed by Nejra Selimović on 17 Nov 2021.
doc: Remove unnecessary notes, remove old new-in-version tags (#651)

Edit on Github