CA.key private key for CA certificate
CA.crt self-signed certificate
CA.pem CA pem key file
certificate.key private key for cluster members
certificate.csr self-signed certificate request
certificate.crt self-signed certificate for cluster members
certificate.pem pem key file for cluster members
client.key client private key for namaste app (gaOwner)
client.csr self-signed certificate request for namaste client app
client.pem cluster client PEM key
admin-client.key client private key for DB Owner (gaAdmin)
admin-client.csr self-signed certificate request for database admin user
admin-client.pem admin-client PEM key
DEPLOYMENT
----------
Keys should be copied to /opt/mongodb -- make sure you set the permissions to 400!
Connecting to client:
mongo --port 27027 --ssl --host database.givingassistant.org -sslPEMKeyFile /opt/mongodb/certificate.pem --sslCAFile /opt/mongodb/CA.pem