Add new root CA certificate

README.md

@@ -45,14 +45,21 @@ Angelcam Arrow Service is:
 arr-rs.angelcam.com:8900
 ```
 
-Currently, a custom root CA certificate is being used. You can find the
-certificate in this repository (file `ca.pem`).
+We use custom root CA certificates. You can find the certificates in this
+repository (files `root-g1.pem` and `root-g2.pem`). Currently, there are two
+root certificates. The older certificate expires on 2025-03-02, the other
+certificate is valid until 2044-04-18. We recommend starting the application
+with both certificates to ensure uninterrupted service after we switch our
+servers to the new certificate.
 
 Here is an example of starting the Arrow Client with one fixed RTSP service and
 with network scanning enabled:
 
 ```bash
-arrow-client arr-rs.angelcam.com:8900 -c ca.pem -d -r "rtsp://localhost:8554/stream.sdp?prof=baseline&res=low"
+arrow-client arr-rs.angelcam.com:8900 -d \
+    -c root-g1.pem \
+    -c root-g2.pem \
+    -r "rtsp://localhost:8554/stream.sdp?prof=baseline&res=low"
 ```
 
 Note that the application requires root privileges for direct access to local

root-g2.pem

@@ -0,0 +1,31 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----