# Zrok Controller certificate error when using public CAs on openziti controller **URL:** \ **Category:** zrok\ **Created:** [February 9, 2023, 3:54pm UTC](https://openziti.discourse.group/t/zrok-controller-certificate-error-when-using-public-cas-on-openziti-controller/1060 "2023-02-09T15:54:14Z")\ **Posts on this page:** 1\ **Showing post:** 4
**Author:** ![markamind](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/markamind/32/157_2.png) [@markamind](https://openziti.discourse.group/u/markamind)\ **Post date:** [February 11, 2023, 12:02am UTC](https://openziti.discourse.group/t/zrok-controller-certificate-error-when-using-public-cas-on-openziti-controller/1060/4 "2023-02-11T00:02:08Z")
> [@lombardoja](#): > > `x509: certificate signed by unknown authority` This specific error reminds me of a past problem that I have experienced. Have you added the public certificate authority to the ziti controller? There is a video that @TheLumberjack did a while ago.. and includes all of the instructions.. I would be interested to know if this resolves your problem. > [@Creating Endpoint with your own Certificate Authority](https://openziti.discourse.group/t/creating-endpoint-with-your-own-certificate-authority/433/12): > > Ok. The video is below. The key is the name of the identity. It needed to follow the “[caName]-[commonName]” format or else it wouldn’t connect. Also the api paths were no longer valid. Good luck - hopefully this helps [[Using 3rd Party CAs with Ziti CLI, and ZAC] ](https://www.youtube.com/watch?v=USMim65c4ic) Here are the full instruction set - it’s quite long and ‘dense’… [Edited - ZITI\_PKI] # generate a new CA ca\_name="new\_ca\_$(date +"%H%M%S")" ca\_dir=${ZITI\_PKI}/$ca\_name echo "New CA is named : ${ca\_name}" echo "New CA d… --- _[View the full topic](https://openziti.discourse.group/t/zrok-controller-certificate-error-when-using-public-cas-on-openziti-controller/1060)._