---
title: "Comment by Alex on \"GitLab Runner on LAN with self-signed certificates\" | Hashnode"
description: "Hello, thank you for this article. I had created cert by command: sudo openssl req -x509 -nodes -days 3650 -newkey rsa:4096 -sha256 -keyout /etc/ssl/private/ngi"
url: "https://hashnode.com/posts/gitlab-runner-on-lan-with-self-signed-certificates/63d5726fb362bc97e797c7fe/comment/6417923397db1bd550a2e229"
---

[Discussion](https://hashnode.com/posts/gitlab-runner-on-lan-with-self-signed-certificates/63d5726fb362bc97e797c7fe)

Comment [GitLab Runner on LAN with self-signed certificates](https://hashnode.com/posts/gitlab-runner-on-lan-with-self-signed-certificates/63d5726fb362bc97e797c7fe)

[Alex](https://hashnode.com/@sorcer)

[Mar 19, 2023](https://hashnode.com/posts/gitlab-runner-on-lan-with-self-signed-certificates/63d5726fb362bc97e797c7fe/comment/6417923397db1bd550a2e229)

Hello, thank you for this article. I had created cert by command: sudo openssl req -x509 -nodes -days 3650 -newkey rsa:4096 -sha256 -keyout /etc/ssl/private/nginx-selfsigned-gitlab.key -out /etc/ssl/certs/nginx-selfsigned-gitlab.crt -subj "/C=US/ST=NY/L=NY/O=GL/OU=GL/CN=gitlab.site" -addext "subjectAltName = DNS:gitlab.site" So I just copy and rename it to ca.crt. I dont understand why I need create 2 cert for this (ca.crt and gitlab.crt)?

[terii](https://hashnode.com/@twyx)

[Apr 20, 2023](https://hashnode.com/posts/gitlab-runner-on-lan-with-self-signed-certificates/63d5726fb362bc97e797c7fe/comment/6417923397db1bd550a2e229#reply-6441ad79fe9ffd14e5b035c6)

The "ca.crt" in my guide is part of the signing chain.

You renamed your "nginx-selfsigned-gitlab.crt" to "ca.crt"? If that's the case I think this is the 'intermediate' chain cert you need to cp to your gitlab runner. The part "cp ca.crt /srv/gitlab-runner/ssl/" in my guide.