From 9a765490e626f3eba6723b7f6dff26cb105d3323 Mon Sep 17 00:00:00 2001
From: gStart9 <george@start9labs.com>
Date: Tue, 31 Mar 2026 13:20:57 -0600
Subject: [PATCH 1/3] Fix link to mozilla trust section

---
 start-os/src/trust-ca.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/start-os/src/trust-ca.md b/start-os/src/trust-ca.md
index 937ed48..e2e88b5 100644
--- a/start-os/src/trust-ca.md
+++ b/start-os/src/trust-ca.md
@@ -136,7 +136,7 @@ This should work for most Debian-based systems, such as Debian, Ubuntu, Mint, Po
 
     If successful, you will see the output `1 added`.
 
-1.  If using Firefox, Thunderbird, or Librewolf, complete this [final step](#debian--ubuntu-1).
+1.  If using Firefox, Thunderbird, or Librewolf, complete this [final step](#3-mozilla-apps-firefox-thunderbird-librewolf).
 
 {{#endtab }}
 {{#tab name="Arch / Garuda" }}

From fc9b75dd362ef7dbadcbbfdff45eb26dcdc5721d Mon Sep 17 00:00:00 2001
From: gStart9 <george@start9labs.com>
Date: Tue, 31 Mar 2026 13:26:44 -0600
Subject: [PATCH 2/3] Fix link to mozilla trust section

---
 start-os/src/trust-ca.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/start-os/src/trust-ca.md b/start-os/src/trust-ca.md
index e2e88b5..89d8852 100644
--- a/start-os/src/trust-ca.md
+++ b/start-os/src/trust-ca.md
@@ -50,7 +50,7 @@ Select your platform:
 
 1. You will see your server's CA certificate as trusted now, signified by a blue (+) sign and the CA cert information will now say "This certificate is marked as trusted for all users" in Keychain Access:
 
-1. If using Firefox, Thunderbird, or Librewolf, complete this [final step](#mac--windows).
+1. If using Firefox, Thunderbird, or Librewolf, complete this [final step](#3-mozilla-apps-firefox-thunderbird-librewolf).
 
 {{#endtab }}
 {{#tab name="Windows" }}
@@ -79,7 +79,7 @@ Select your platform:
 
 1. You can save the console settings (where we added a snap-in), if desired. Your Root CA will remain imported to the CA certificate store either way, and you will likely use this guide if you need to import a new certificate.
 
-1. If using Firefox, Thunderbird, or Librewolf, complete this [final step](#mac--windows).
+1. If using Firefox, Thunderbird, or Librewolf, complete this [final step](#3-mozilla-apps-firefox-thunderbird-librewolf).
 
 {{#endtab }}
 {{#tab name="iOS" }}

From cad1dace9ad8e25202bd401abf8022921e463d4f Mon Sep 17 00:00:00 2001
From: gStart9 <george@start9labs.com>
Date: Tue, 31 Mar 2026 13:56:43 -0600
Subject: [PATCH 3/3] Make debian/ubuntu instructions easier to copy/paste

---
 start-os/src/trust-ca.md | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/start-os/src/trust-ca.md b/start-os/src/trust-ca.md
index 89d8852..483ed62 100644
--- a/start-os/src/trust-ca.md
+++ b/start-os/src/trust-ca.md
@@ -127,11 +127,12 @@ This should work for most Debian-based systems, such as Debian, Ubuntu, Mint, Po
 
         cd ~/Downloads
 
-1.  Add your Root CA to your OS trust store. Be certain to replace `your-server-name` with your server's unique hostname:
+1.  Add your Root CA to your OS trust store. Be certain to replace `your-server-name` with your server's unique hostname on the first line:
 
+        hostname=your-server-name.local
         sudo mkdir -p /usr/share/ca-certificates/start9
-        sudo cp "your-server-name.crt" /usr/share/ca-certificates/start9/
-        sudo bash -c "echo 'start9/your-server-name.crt' >> /etc/ca-certificates.conf"
+        sudo cp "${hostname}.crt" /usr/share/ca-certificates/start9/
+        sudo bash -c "echo 'start9/${hostname}.crt' >> /etc/ca-certificates.conf"
         sudo update-ca-certificates
 
     If successful, you will see the output `1 added`.
@@ -148,7 +149,7 @@ This should work for most Debian-based systems, such as Debian, Ubuntu, Mint, Po
 1.  Add your Root CA to your OS trust store. Be certain to replace `your-server-name` with your server's unique hostname in the second command:
 
         sudo pacman -S ca-certificates
-        sudo cp "your-server-name.crt" /etc/ca-certificates/trust-source/anchors/
+        sudo cp "your-server-name.local.crt" /etc/ca-certificates/trust-source/anchors/
         sudo update-ca-trust
 
     Despite no output from the last command, you can test your app right away.
@@ -163,7 +164,7 @@ This should work for most Debian-based systems, such as Debian, Ubuntu, Mint, Po
 1.  Add your Root CA to your OS trust store. Be certain to replace `your-server-name` with your server's unique hostname in the second command:
 
         sudo dnf install ca-certificates
-        sudo cp "your-server-name.crt" /etc/pki/ca-trust/source/anchors/
+        sudo cp "your-server-name.local.crt" /etc/pki/ca-trust/source/anchors/
         sudo update-ca-trust
 
     There will be no output if the update-ca-trust command completes successfully.