The steps to regenerate this CA: 1. Get etcd-ca source code and generate binary. $ go get github.com/coreos/etcd-ca 2. Run generate_testing_certs.sh with etcd-ca binary location. $ ./generate_testing_certs.sh Details about generation are in the generate_testing_certs.sh script. 3. Check current directory to see regenerated files.