systemctl stop step-ca

step certificate create "Frogg.home CA Intermediate CA" /var/lib/step-ca/.step/certs/intermediate_ca.crt /var/lib/step-ca/.step/secrets/intermediate_ca_key \
--profile intermediate-ca \
--ca /var/lib/step-ca/.step/certs/root_ca.crt \
--ca-key /var/lib/step-ca/.step/secrets/root_ca_key \
--not-after 8760h \
--ca-password-file /var/lib/step-ca/.step/password.txt \
--password-file /var/lib/step-ca/.step/password.txt \
--force

chown -R step:step /var/lib/step-ca/
systemctl start step-ca