sudo tee /usr/local/share/ca-certificates/9net.crt
```
3. Run `sudo update-ca-certificates`
## Requesting a certificate via ACME
Note: These instructions use the `step` CLI. Make sure you have the root CA installed as above. Also, to make renewals easier, I'd recommend having one certificate for all domains on a single machine (fairly easy with multiple `--san` parameteres)
1. Configure your webserver however you need to for webroot cert verification