# Hive Mq Cloud with certificates **URL:** \ **Category:** HiveMQ Cloud\ **Created:** [April 3, 2021, 4:19pm UTC](https://community.hivemq.com/t/hive-mq-cloud-with-certificates/495 "2021-04-03T16:19:48Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![anmabi84](https://avatars.discourse-cdn.com/v4/letter/a/77aa72/32.png) [@anmabi84](https://community.hivemq.com/u/anmabi84)\ **Post date:** [April 3, 2021, 4:19pm UTC](https://community.hivemq.com/t/hive-mq-cloud-with-certificates/495/1 "2021-04-03T16:19:48Z")
Hi Everybody, I am new of this forum. I am trying to use the HiveMQ Cloud broker with some devices. Most all of them work ok with credential and TLS and no certificate (as required by the HiveMQ Cloud free account). I have a couple of them who do not accept the missing of the certificate while selecting the SSL/TLS option. Is there any way to get at least the HiveMQ CA file to allow the working even with these devices strictly willing (in case SSL/TLS is selected) to have the certificate file? Thanks for your help, Andrew ---
**Author:** ![hivemq-support](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.hivemq.com/hivemq-support/32/357_2.png) [@hivemq-support](https://community.hivemq.com/u/hivemq-support)\ **Post date:** [June 24, 2021, 7:47am UTC](https://community.hivemq.com/t/hive-mq-cloud-with-certificates/495/2 "2021-06-24T07:47:34Z")
Hi @anmabi84 Welcome to the HiveMQ Community Forum and thank you for your patience. Check out our [HiveMQ Cloud FAQ post](https://community.hivemq.com/t/frequently-asked-question/514). It contains a tutorial to create a server certificate. Best, Florian ---
**Author:** ![gandoki](https://avatars.discourse-cdn.com/v4/letter/g/e8c25b/32.png) [@gandoki](https://community.hivemq.com/u/gandoki)\ **Post date:** [June 24, 2021, 4:58pm UTC](https://community.hivemq.com/t/hive-mq-cloud-with-certificates/495/3 "2021-06-24T16:58:05Z")
Also the Mosquitto CLI documentation has a link to the CA used for the Cloud broker. [https://console.hivemq.cloud/clients/mosquitto-cli?uuid=3a574b52dc014c57ad4586a7b8402589](https://console.hivemq.cloud/clients/mosquitto-cli?uuid=3a574b52dc014c57ad4586a7b8402589) ---
**Author:** ![anmabi84](https://avatars.discourse-cdn.com/v4/letter/a/77aa72/32.png) [@anmabi84](https://community.hivemq.com/u/anmabi84)\ **Post date:** [July 28, 2021, 1:27pm UTC](https://community.hivemq.com/t/hive-mq-cloud-with-certificates/495/4 "2021-07-28T13:27:04Z")
Hi Fraschbi, I tried for some weeks to sort this out using the command openssl s\_client -connect 4ad85b7fade04d07911be2ac1da2f5e4.s2.eu.hivemq.cloud:8883 -showcerts \< /dev/null 2\> /dev/null | sed -n ‘/BEGIN/,/END/p’ \> server.pem but I was unsuccessfull. I am currently getting the error “Impossible to find the defined root”. I am sure I am getting wrong some of the fields but I cannot sort this out. Could you help me on this creating the CA file as done in this old topic? > [@MQTT TLS Client Certificate Create/Generate](https://community.hivemq.com/t/mqtt-tls-client-certificate-create-generate/276/4): > > Hi @splata, HiveMQ cloud basic does not support mutual TLS so you do not need the files “Certificate” and “Private Key” You can create the Server Certificate file using the [OpenSSL s\_client](https://www.openssl.org/docs/man1.0.2/man1/openssl-s_client.html) openssl s\_client -connect 4ad85b7fade04d07911be2ac1da2f5e4.s2.eu.hivemq.cloud:8883 -showcerts \< /dev/null 2\> /dev/null | sed -n '/BEGIN/,/END/p' \> server.pem This will create a file called “server.pem”, which you can use as “Server Certiciate”. I took the liberty and created the [file](https://drive.google.com/file/d/1VfNZ1wWcXvRzuSCx7WtNGJxW1jq_R7nk/view?usp=sharing) for your specific clo… I would ask you to set as ending date of the certificate 1/1/2040. In fact my main issue in this moment is that I have a working file ([https://letsencrypt.org/certs/trustid-x3-root.pem](https://letsencrypt.org/certs/trustid-x3-root.pem)) but this will elapse on Septmber 2021 making my whole system unusable. Obvioulsy If you could explain me the exact typing to be used in my OPENSSL command that would be even better. Thanks for your help and assistance on this matter.