diff --git a/application/src/test/resources/lwm2m/credentials/shell/lwM2M_cfssl_chain_trusts_and_clients_for_test.sh b/application/src/test/resources/lwm2m/credentials/shell/lwM2M_cfssl_chain_trusts_and_clients_for_test.sh
new file mode 100755
index 0000000000..26f47266a7
--- /dev/null
+++ b/application/src/test/resources/lwm2m/credentials/shell/lwM2M_cfssl_chain_trusts_and_clients_for_test.sh
@@ -0,0 +1,299 @@
+#!/usr/bin/env bash
+
+# Change working directory
+cd -- "$(
+	dirname "${0}"
+)" || exit 1
+
+readonly TRUST_PATH="Trust"
+readonly CA_ROOT_CERT_KEY="ca-root"
+readonly CA_ROOT_ALIAS="root"
+readonly CA_INTERMEDIATE_CERT_KEY_PREF="intermediate_ca"
+CA_INTERMEDIATE_START=0
+CA_INTERMEDIATE_FINISH=2
+CA_INTERMEDIATE_NUMBER=${CA_INTERMEDIATE_START}
+CA_INTERMEDIATE_CERT_SIGN=${CA_ROOT_CERT_KEY}
+CA_LIST_CERT_FOR_CAT=""
+readonly CA_TRUST_STORE_ALL_CHAIN="lwm2mtruststorechain"
+readonly CA_TRUST_STORE_PWD="server_ks_password"
+readonly CA_TRUST_CERT_ALIAS="root"
+readonly CA_TRUST_CERT_CHAIN_JKS="lwm2mtruststorechain"
+readonly CA_TRUST_STORE_CHAIN_ALIAS="trust_cert_chain_alias"
+
+readonly CLIENT_PATH="Client"
+readonly CLIENT_JKS_FOR_TEST="lwm2mclient"
+readonly CLIENT_CERT_KEY_PREF="LwX509"
+readonly CLIENT_CERT_ALIAS_PREF="client_alias_"
+readonly CLIENT_STORE_PWD="client_ks_password"
+readonly CLIENT_HOST_NAME="thingsboard_test.io"
+CLIENT_START=0
+CLIENT_FINISH=1
+CLIENT_NUMBER=${CLIENT_START}
+
+SERVER_HOST_NAME="localhost.localdomain"
+SERVER_LOCAL_HOST_NAME="localhost"
+SERVER_PUBLIC_HOST_NAMES="-"
+
+readonly CF_COMMANDS="
+	cfssl
+	cfssljson
+"
+
+if [ ! -z "$1" ]; then
+  CA_INTERMEDIATE_START=$1
+  CA_INTERMEDIATE_NUMBER=${CA_INTERMEDIATE_START}
+fi
+
+if [ ! -z "$2" ]; then
+  CA_INTERMEDIATE_FINISH=$2
+fi
+
+if [ ! -z "$3" ]; then
+   CLIENT_START=$1
+   CLIENT_NUMBER=${CLIENT_START}
+fi
+
+if [ ! -z "$4" ]; then
+  CLIENT_FINISH=$4
+fi
+
+# Change working directory
+rm -rf ${TRUST_PATH}
+mkdir -p ${TRUST_PATH}
+rm -rf ${CLIENT_PATH}
+mkdir -p ${CLIENT_PATH}
+cd -- "$(
+	dirname "${0}"
+)" || exit 1
+
+
+rm *.csr
+rm *.p12
+rm *.json
+rm *.pem
+rm *.jks
+
+intermediate_common_name() {
+  echo "${CA_INTERMEDIATE_CERT_KEY_PREF}${CA_INTERMEDIATE_NUMBER}"
+}
+
+set_list_sert_for_cat() {
+  local first="$1"
+  echo "$first ${CA_LIST_CERT_FOR_CAT}"
+}
+
+client_common_name() {
+  echo "${CLIENT_CERT_KEY_PREF}$(printf "%08d" ${CLIENT_NUMBER})"
+}
+
+client_alias_name() {
+  echo "${CLIENT_CERT_ALIAS_PREF}$(printf "%08d" ${CLIENT_NUMBER})"
+}
+
+for COMMAND in ${CF_COMMANDS}; do
+	if ! command -v ${COMMAND} &> /dev/null; then
+		echo "ERROR: Missing command ${COMMAND}" >&2
+		echo "Install the package from: https://pkg.cfssl.org/" >&2
+		exit 1
+	fi
+done
+
+tee ./${TRUST_PATH}/ca-config.json 1> /dev/null <<-CONFIG
+{
+  "signing": {
+    "default": {
+      "expiry": "8760h",
+      "names": [
+        {
+          "C": "UK",
+          "ST": "Kyiv city",
+          "L": "Kyiv",
+          "O": "Thingsboard",
+          "OU": "DEVELOPER_TEST"
+        }
+      ]
+    },
+    "profiles": {
+      "server": {
+        "expiry": "43800h",
+        "key": {
+          "algo": "ecdsa",
+          "size": 256
+        },
+        "usages": [
+          "signing",
+          "key encipherment",
+          "server auth"
+        ]
+      },
+      "client": {
+        "expiry": "43800h",
+        "key": {
+          "algo": "ecdsa",
+          "size": 256
+        },
+        "usages": [
+          "signing",
+          "key encipherment",
+          "client auth"
+        ]
+      },
+      "client-server": {
+        "expiry": "43800h",
+        "key": {
+          "algo": "ecdsa",
+          "size": 256
+        },
+        "usages": [
+          "signing",
+          "key encipherment",
+          "server auth",
+          "client auth"
+        ]
+      }
+    }
+  }
+}
+CONFIG
+
+tee ./${TRUST_PATH}/ca-root-to-intermediate-config.json 1> /dev/null <<-CONFIG
+{
+	"signing": {
+		"default": {
+			"expiry": "43800h",
+			"ca_constraint": {
+				"is_ca": true,
+				"max_path_len": 0,
+				"max_path_len_zero": true
+			},
+      "key": {
+        "algo": "ecdsa",
+        "size": 256
+	    },
+			"usages": [
+				"digital signature",
+				"cert sign",
+				"crl sign",
+				"signing"
+			]
+		}
+	}
+}
+CONFIG
+
+echo "===================================================="
+echo -e "Generate the root of certificates: \n-${CA_ROOT_KEY}-key.pem (certificate key)\n-${CA_ROOT_KEY}.pem (certificate)\n-${CA_ROOT_KEY}.csr (sign request)"
+echo "===================================================="
+cfssl genkey \
+  -initca \
+  - \
+  <<-CONFIG | cfssljson -bare ./${TRUST_PATH}/${CA_ROOT_CERT_KEY}
+{
+  "CN": "ROOT CA",
+  "key": {
+    "algo": "ecdsa",
+    "size": 256
+  },
+  "names": [
+    {
+      "C": "UK",
+      "ST": "Kyiv city",
+      "L": "Kyiv",
+      "O": "Thingsboard",
+      "OU": "DEVELOPER_TEST"
+    }
+  ],
+  "ca": {
+    "expiry": "131400h"
+  }
+}
+CONFIG
+CA_LIST_CERT_FOR_CAT=$(set_list_sert_for_cat ./${TRUST_PATH}/${CA_ROOT_CERT_KEY}.pem)
+
+echo "===================================================="
+echo -e "Generate and Signed the intermediates of our certificates: \n-${CA_INTERMEDIATE_CERT_KEY_PREF}?-key.pem (certificate key)\n-${CA_INTERMEDIATE_CERT_KEY_PREF}?.pem (certificate)\n-${CA_INTERMEDIATE_CERT_KEY_PREF}?.csr (sign request)"
+echo "===================================================="
+
+while [[ ${CA_INTERMEDIATE_NUMBER} -lt ${CA_INTERMEDIATE_FINISH} ]];
+do
+  CA_INTERMEDIATE_CERT_KEY=$(intermediate_common_name)
+  CA_INTERMEDIATE_NUMBER=$((${CA_INTERMEDIATE_NUMBER} + 1))
+
+  cfssl gencert \
+    -ca ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_SIGN}.pem \
+    -ca-key ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_SIGN}-key.pem \
+    -config ./${TRUST_PATH}/ca-root-to-intermediate-config.json \
+    -hostname "${SERVER_HOST_NAME},${SERVER_LOCAL_HOST_NAME}${SERVER_PUBLIC_HOST_NAMES:+, }${SERVER_PUBLIC_HOST_NAMES}" \
+    - \
+    <<-CONFIG | cfssljson -bare ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}
+  {
+    "CN": "${CA_INTERMEDIATE_CERT_KEY}",
+    "names": [
+      {
+        "C": "UK",
+        "ST": "Kyiv city",
+        "L": "Kyiv",
+        "O": "Thingsboard",
+        "OU": "DEVELOPER_TEST"
+      }
+    ]
+  }
+CONFIG
+  #openssl x509 -in ${CA_INTERMEDIATE_CERT_KEY}.pem -text -noout
+  CA_LIST_CERT_FOR_CAT=$(set_list_sert_for_cat ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem)
+  CA_INTERMEDIATE_CERT_SIGN=${CA_INTERMEDIATE_CERT_KEY}
+done
+
+echo "===================================================="
+echo -e "Add the CA_certificate to keystore: ${CA_TRUST_CERT_CHAIN_JKS}.jks"
+echo "===================================================="
+cat ${CA_LIST_CERT_FOR_CAT} > ./${TRUST_PATH}/${CA_TRUST_STORE_ALL_CHAIN}.pem
+openssl pkcs12 -export -in ./${TRUST_PATH}/${CA_TRUST_STORE_ALL_CHAIN}.pem -inkey ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}-key.pem -out ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}.p12 -name ${CA_TRUST_STORE_CHAIN_ALIAS} -CAfile ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem -caname ${CA_ROOT_ALIAS} -passin pass:${CA_TRUST_STORE_PWD} -passout pass:${CA_TRUST_STORE_PWD}
+keytool -importkeystore -deststorepass ${CA_TRUST_STORE_PWD} -destkeypass ${CA_TRUST_STORE_PWD} -destkeystore ./${TRUST_PATH}/${CA_TRUST_CERT_CHAIN_JKS}.jks -srckeystore ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}.p12 -srcstoretype PKCS12 -srcstorepass ${CA_TRUST_STORE_PWD} -alias ${CA_TRUST_STORE_CHAIN_ALIAS}
+
+keytool -list -v -keystore ./${TRUST_PATH}/lwm2mtruststorechain.jks -storepass server_ks_password -storetype PKCS12
+
+echo "===================================================="
+echo -e "Generate and Signed the clients of our certificates: \n-${CLIENT_CERT_KEY_PREF}?-key.pem (certificate key)\n-${CLIENT_CERT_KEY_PREF}?.pem (certificate)\n-${CCLIENT_CERT_KEY_PREF}?.csr (sign request)"
+echo "===================================================="
+
+
+while [[ ${CLIENT_NUMBER} -lt ${CLIENT_FINISH} ]];
+do
+  CLIENT_CERT_KEY=$(client_common_name)
+  CLIENT_CERT_ALIAS=$(client_alias_name)
+  CLIENT_NUMBER=$((${CLIENT_NUMBER} + 1))
+
+  cfssl gencert \
+	-ca ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem \
+	-ca-key ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}-key.pem \
+	-config ./${TRUST_PATH}/ca-config.json \
+	-profile client \
+	-hostname "${CLIENT_HOST_NAME}" \
+	- \
+	<<-CONFIG | cfssljson -bare ./${CLIENT_PATH}/${CLIENT_CERT_KEY}
+{
+	"CN": "${CLIENT_CERT_KEY}"
+}
+CONFIG
+
+echo "===================================================="
+echo -e "Add the client certificate (${CLIENT_CERT_KEY}.pem) to keystore: ${CLIENT_JKS_FOR_TEST}.jks"
+echo "===================================================="
+cat ./${CLIENT_PATH}/${CLIENT_CERT_KEY}.pem ${CA_LIST_CERT_FOR_CAT} > ./${CLIENT_PATH}/${CLIENT_CERT_KEY}_chain.pem
+openssl pkcs12 -export -in ./${CLIENT_PATH}/${CLIENT_CERT_KEY}_chain.pem -inkey ./${CLIENT_PATH}/${CLIENT_CERT_KEY}-key.pem -out ./${CLIENT_PATH}/${CLIENT_CERT_KEY}.p12 -name ${CLIENT_CERT_ALIAS} -CAfile ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem -caname ${CA_ROOT_ALIAS} -passin pass:${CLIENT_STORE_PWD} -passout pass:${CLIENT_STORE_PWD}
+keytool -importkeystore -deststorepass ${CLIENT_STORE_PWD} -destkeypass ${CLIENT_STORE_PWD} -destkeystore ./${CLIENT_PATH}/${CLIENT_JKS_FOR_TEST}.jks -srckeystore ./${CLIENT_PATH}/${CLIENT_CERT_KEY}.p12 -srcstoretype PKCS12 -srcstorepass ${CLIENT_STORE_PWD} -alias ${CLIENT_CERT_ALIAS}
+
+done
+
+keytool -list -v -keystore ./${CLIENT_PATH}/lwm2mclient.jks -storepass client_ks_password -storetype PKCS12
+
+rm ./${TRUST_PATH}/*.p12
+rm ./${TRUST_PATH}/*.csr
+rm ./${TRUST_PATH}/*.json
+rm ./${TRUST_PATH}/${CA_ROOT_CERT_KEY}*
+rm ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY_PREF}*
+
+
+rm ./${CLIENT_PATH}/*.p12 2> /dev/null
+rm ./${CLIENT_PATH}/*.csr 2> /dev/null
diff --git a/application/src/test/resources/lwm2m/credentials/shell/lwm2m_cfssl_chain_for_test_All.sh b/application/src/test/resources/lwm2m/credentials/shell/lwm2m_cfssl_chain_for_test_All.sh
new file mode 100755
index 0000000000..b3b114cb28
--- /dev/null
+++ b/application/src/test/resources/lwm2m/credentials/shell/lwm2m_cfssl_chain_for_test_All.sh
@@ -0,0 +1,65 @@
+#!/usr/bin/env bash
+
+readonly INTERMEDIATE_START=0
+readonly INTERMEDIATE_FINISH=2
+readonly CLIENT_START=0
+readonly CLIENT_FINISH=5
+
+IS_IHFO=false
+IS_SERVER_CREATED_KEY=true
+IS_TRUST_CLIENT_CREATED_KEY=true
+
+cd -- "$(
+	dirname "${0}"
+)" || exit 1
+
+Help()
+{
+   # Display Help
+   echo "Description of the script functions."
+   echo
+   echo "Syntax: scriptTemplate [-g|h|v|V]"
+   echo "options:"
+   echo "h     Print this Help."
+   echo "v     Verbose mode."
+   echo "V     Print software version and exit."
+   echo
+}
+
+if [ "$1" == "-h" ] ; then
+    echo -e "Usage 2: ./`basename $0` \"Information is not displayed\" : \"Keys for the server are generated\" : \"Keys for the clients and trusts are generated\""
+    echo -e "Usage 1: ./`basename $0` true \"Information is displayed\" : \"Keys for the server are generated\" : \"Keys for the clients and trusts are generated\""
+    echo -e "Usage 3: ./`basename $0` true false \"Information is displayed\" : \"Keys for the server are not generated\" : \"Keys for the clients and trusts are generated\""
+    echo -e "Usage 4: ./`basename $0` true false false \"Information is displayed\" : \"Keys for the server are not generated\" : \"Keys for the clients and trusts are not generated\""
+    echo -e "Usage 4: ./`basename $0` true true false \"Information is displayed\" : \"Keys for the server are generated\" : \"Keys for the clients and trusts are not generated\""
+    echo "This Help File: ./`basename $0` -h"
+    exit 0
+fi
+
+if [ -n "$1" ]; then
+  IS_IHFO=$1
+fi
+
+if [ -n "$2" ]; then
+  IS_SERVER_CREATED_KEY=$2
+fi
+
+if [ -n "$3" ]; then
+  IS_TRUST_CLIENT_CREATED_KEY=$3
+fi
+
+if  [ "$IS_IHFO" = false ] ; then
+  if [ "$IS_SERVER_CREATED_KEY" = true ] ; then
+    ./lwm2m_cfssl_chain_server_for_test.sh > /dev/null 2>&1 &
+  fi
+  if [ "$IS_TRUST_CLIENT_CREATED_KEY" = true ] ; then
+    ./lwM2M_cfssl_chain_trusts_and_clients_for_test.sh ${INTERMEDIATE_START} ${INTERMEDIATE_FINISH} ${CLIENT_START} ${CLIENT_FINISH} > /dev/null 2>&1 &
+  fi
+else
+    if [ "$IS_SERVER_CREATED_KEY" = true ] ; then
+    ./lwm2m_cfssl_chain_server_for_test.sh
+  fi
+  if [ "$IS_TRUST_CLIENT_CREATED_KEY" = true ] ; then
+    ./lwM2M_cfssl_chain_trusts_and_clients_for_test.sh ${INTERMEDIATE_START} ${INTERMEDIATE_FINISH} ${CLIENT_START} ${CLIENT_FINISH}
+  fi
+fi
\ No newline at end of file
diff --git a/application/src/test/resources/lwm2m/credentials/shell/lwm2m_cfssl_chain_server_for_test.sh b/application/src/test/resources/lwm2m/credentials/shell/lwm2m_cfssl_chain_server_for_test.sh
new file mode 100755
index 0000000000..efe6ed46dd
--- /dev/null
+++ b/application/src/test/resources/lwm2m/credentials/shell/lwm2m_cfssl_chain_server_for_test.sh
@@ -0,0 +1,298 @@
+#!/usr/bin/env bash
+
+# REF: https://github.com/cloudflare/cfssl
+
+# Change working directory
+cd -- "$(
+	dirname "${0}"
+)" || exit 1
+
+readonly CA_ROOT_CERT_KEY="ca-root"
+readonly CA_ROOT_ALIAS="root"
+readonly CA_INTERMEDIATE_CERT_KEY_PREF="intermediate_ca"
+CA_INTERMEDIATE_NUMBER=0
+CA_LIST_CERT_FOR_CAT=""
+
+readonly CF_COMMANDS="
+	cfssl
+	cfssljson
+"
+
+readonly SERVER_JKS_FOR_TEST="lwm2mserver"
+readonly STORE_PASS_PWD="server_ks_password"
+readonly SERVER_PATH="Server"
+readonly SERVER_CERT_KEY="lwm2mserver"
+readonly SERVER_CERT_CHAIN="lwm2mserver_chain"
+readonly SERVER_CERT_ALIAS="server"
+readonly BS_SERVER_CERT_KEY="lwm2mserverbs"
+readonly BS_SERVER_CERT_CHAIN="lwm2mserverbs_chain"
+readonly BS_SERVER_CERT_ALIAS="bootstrap"
+
+SERVER_HOST_NAME="localhost.localdomain"
+SERVER_LOCAL_HOST_NAME="localhost"
+SERVER_PUBLIC_HOST_NAMES="-"
+
+intermediate_common_name() {
+  echo "${CA_INTERMEDIATE_CERT_KEY_PREF}${CA_INTERMEDIATE_NUMBER}"
+}
+
+set_list_sert_for_cat() {
+  local first="$1"
+  echo "$first ${CA_LIST_CERT_FOR_CAT}"
+}
+
+
+# Change working directory
+rm -rf ${SERVER_PATH}
+mkdir -p ${SERVER_PATH}
+
+cd -- "$(
+	dirname ./${SERVER_PATH}
+)" || exit 1
+
+
+rm *.csr
+rm *.p12
+rm *.json
+rm *.pem
+rm *.jks
+
+CA_INTERMEDIATE_CERT_SIGN=${CA_ROOT_CERT_KEY}
+CA_INTERMEDIATE_CERT_KEY=$(intermediate_common_name)
+CA_INTERMEDIATE_NUMBER=$((${CA_INTERMEDIATE_NUMBER} + 1))
+CA_LIST_CERT_FOR_CAT=""
+
+for COMMAND in ${CF_COMMANDS}; do
+	if ! command -v ${COMMAND} &> /dev/null; then
+		echo "ERROR: Missing command ${COMMAND}" >&2
+		echo "Install the package from: https://pkg.cfssl.org/" >&2
+		exit 1
+	fi
+done
+
+tee ./${SERVER_PATH}/ca-config.json 1> /dev/null <<-CONFIG
+{
+  "signing": {
+    "default": {
+      "expiry": "8760h",
+      "names": [
+        {
+          "C": "UK",
+          "ST": "Kyiv city",
+          "L": "Kyiv",
+          "O": "Thingsboard",
+          "OU": "DEVELOPER_TEST"
+        }
+      ]
+    },
+    "profiles": {
+      "server": {
+        "expiry": "43800h",
+        "key": {
+          "algo": "ecdsa",
+          "size": 256
+        },
+        "usages": [
+          "signing",
+          "key encipherment",
+          "server auth"
+        ]
+      },
+      "client": {
+        "expiry": "43800h",
+        "key": {
+          "algo": "ecdsa",
+          "size": 256
+        },
+        "usages": [
+          "signing",
+          "key encipherment",
+          "client auth"
+        ]
+      },
+      "client-server": {
+        "expiry": "43800h",
+        "key": {
+          "algo": "ecdsa",
+          "size": 256
+        },
+        "usages": [
+          "signing",
+          "key encipherment",
+          "server auth",
+          "client auth"
+        ]
+      }
+    }
+  }
+}
+CONFIG
+
+tee ./${SERVER_PATH}/ca-root-to-intermediate-config.json 1> /dev/null <<-CONFIG
+{
+	"signing": {
+		"default": {
+			"expiry": "43800h",
+			"ca_constraint": {
+				"is_ca": true,
+				"max_path_len": 0,
+				"max_path_len_zero": true
+			},
+      "key": {
+        "algo": "ecdsa",
+        "size": 256
+	    },
+			"usages": [
+				"digital signature",
+				"cert sign",
+				"crl sign",
+				"signing"
+			]
+		}
+	}
+}
+CONFIG
+
+echo "===================================================="
+echo -e "Generate the root of certificates: \n-${CA_ROOT_KEY}-key.pem (certificate key)\n-${CA_ROOT_KEY}.pem (certificate)\n-${CA_ROOT_KEY}.csr (sign request)"
+echo "===================================================="
+cfssl genkey \
+  -initca \
+  - \
+  <<-CONFIG | cfssljson -bare ./${SERVER_PATH}/${CA_ROOT_CERT_KEY}
+{
+  "CN": "ROOT CA for servers",
+  "key": {
+    "algo": "ecdsa",
+    "size": 256
+  },
+  "names": [
+    {
+      "C": "UK",
+      "ST": "Kyiv city",
+      "L": "Kyiv",
+      "O": "Thingsboard",
+      "OU": "DEVELOPER_TEST"
+    }
+  ],
+  "ca": {
+    "expiry": "131400h"
+  }
+}
+CONFIG
+CA_LIST_CERT_FOR_CAT=$(set_list_sert_for_cat ./${SERVER_PATH}/${CA_ROOT_CERT_KEY}.pem)
+
+echo "===================================================="
+echo -e "Generate and Signed the first intermediates of our certificates: \n-${CA_INTERMEDIATE_CERT_KEY}-key.pem (certificate key)\n-${CA_INTERMEDIATE_CERT_KEY}.pem (certificate)\n-${CA_INTERMEDIATE_CERT_KEY}.csr (sign request)"
+echo "===================================================="
+cfssl gencert \
+	-ca ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_SIGN}.pem \
+	-ca-key ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_SIGN}-key.pem \
+	-config ./${SERVER_PATH}/ca-root-to-intermediate-config.json \
+	-hostname "${SERVER_HOST_NAME},${SERVER_LOCAL_HOST_NAME}${SERVER_PUBLIC_HOST_NAMES:+, }${SERVER_PUBLIC_HOST_NAMES}" \
+	- \
+	<<-CONFIG | cfssljson -bare ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}
+{
+	"CN": "${CA_INTERMEDIATE_CERT_KEY}",
+  "names": [
+    {
+      "C": "UK",
+      "ST": "Kyiv city",
+      "L": "Kyiv",
+      "O": "Thingsboard",
+      "OU": "DEVELOPER_TEST"
+    }
+  ]
+}
+CONFIG
+CA_LIST_CERT_FOR_CAT=$(set_list_sert_for_cat ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem)
+
+
+## Lwm2m Server certificate
+echo "===================================================="
+echo -e "Generate and Signed the server certificate: \n-${SERVER_CERT_KEY}-key.pem (certificate key)\n-${SERVER_CERT_KEY}.pem (certificate)\n-${SERVER_CERT_KEY}.csr (sign request)"
+echo "===================================================="
+cfssl gencert \
+	-ca ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem \
+	-ca-key ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}-key.pem \
+	-config ./${SERVER_PATH}/ca-config.json \
+	-profile server \
+	-hostname "${SERVER_HOST_NAME},${SERVER_LOCAL_HOST_NAME}${SERVER_PUBLIC_HOST_NAMES:+, }${SERVER_PUBLIC_HOST_NAMES}" \
+	- \
+	<<-CONFIG | cfssljson -bare ./${SERVER_PATH}/${SERVER_CERT_KEY}
+{
+	"CN": "${SERVER_LOCAL_HOST_NAME}"
+}
+CONFIG
+
+echo "===================================================="
+echo -e "Add the server certificate (${SERVER_CERT_KEY}.pem) to keystore: ${SERVER_JKS_FOR_TEST}.jks"
+echo "===================================================="
+cat ./${SERVER_PATH}/${SERVER_CERT_KEY}.pem ${CA_LIST_CERT_FOR_CAT} > ./${SERVER_PATH}/${SERVER_CERT_CHAIN}.pem
+openssl pkcs12 -export -in ./${SERVER_PATH}/${SERVER_CERT_CHAIN}.pem -inkey ./${SERVER_PATH}/${SERVER_CERT_KEY}-key.pem -out ./${SERVER_PATH}/${SERVER_CERT_KEY}.p12 -name ${SERVER_CERT_ALIAS} -CAfile ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem -caname ${CA_ROOT_ALIAS} -passin pass:${STORE_PASS_PWD} -passout pass:${STORE_PASS_PWD}
+keytool -importkeystore -deststorepass ${STORE_PASS_PWD} -destkeypass ${STORE_PASS_PWD} -destkeystore ./${SERVER_PATH}/${SERVER_JKS_FOR_TEST}.jks -srckeystore ./${SERVER_PATH}/${SERVER_CERT_KEY}.p12 -srcstoretype PKCS12 -srcstorepass ${STORE_PASS_PWD} -alias ${SERVER_CERT_ALIAS}
+
+
+CA_INTERMEDIATE_CERT_SIGN=${CA_INTERMEDIATE_CERT_KEY}
+CA_INTERMEDIATE_CERT_KEY=$(intermediate_common_name)
+CA_INTERMEDIATE_NUMBER=$((${CA_INTERMEDIATE_NUMBER} + 1))
+echo "===================================================="
+echo -e "Generate and Signed the second intermediates of our certificates: \n-${CA_INTERMEDIATE_CERT_KEY}-key.pem (certificate key)\n-${CA_INTERMEDIATE_CERT_KEY}.pem (certificate)\n-${CA_INTERMEDIATE_CERT_KEY}.csr (sign request)"
+echo "===================================================="
+cfssl gencert \
+	-ca ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_SIGN}.pem \
+	-ca-key ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_SIGN}-key.pem \
+	-config ./${SERVER_PATH}/ca-root-to-intermediate-config.json \
+	-hostname "${SERVER_HOST_NAME},${SERVER_LOCAL_HOST_NAME}${SERVER_PUBLIC_HOST_NAMES:+, }${SERVER_PUBLIC_HOST_NAMES}" \
+	- \
+	<<-CONFIG | cfssljson -bare ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}
+{
+	"CN": "${CA_INTERMEDIATE_CERT_KEY}",
+  "names": [
+    {
+      "C": "UK",
+      "ST": "Kyiv city",
+      "L": "Kyiv",
+      "O": "Thingsboard",
+      "OU": "DEVELOPER_TEST"
+    }
+  ]
+}
+CONFIG
+CA_LIST_CERT_FOR_CAT=$(set_list_sert_for_cat ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem)
+
+## Bootstrap server certificate
+echo "===================================================="
+echo -e "Generate and Signed the server certificate: \n-${BS_SERVER_CERT_KEY}-key.pem (certificate key)\n-${BS_SERVER_CERT_KEY}.pem (certificate)\n-${BS_SERVER_CERT_KEY}.csr (sign request)"
+echo "===================================================="
+cfssl gencert \
+	-ca ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem \
+	-ca-key ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}-key.pem \
+	-config ./${SERVER_PATH}/ca-config.json \
+	-profile server \
+	-hostname "${SERVER_HOST_NAME},${SERVER_LOCAL_HOST_NAME}${SERVER_PUBLIC_HOST_NAMES:+, }${SERVER_PUBLIC_HOST_NAMES}" \
+	- \
+	<<-CONFIG | cfssljson -bare ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}
+{
+	"CN": "${SERVER_LOCAL_HOST_NAME}"
+}
+CONFIG
+
+echo "===================================================="
+echo -e "Add the Bootstrap server certificate (${BS_SERVER_CERT_KEY}.pem) to keystore: ${SERVER_JKS_FOR_TEST}.jks"
+echo "===================================================="
+cat ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}.pem ${CA_LIST_CERT_FOR_CAT} > ./${SERVER_PATH}/${BS_SERVER_CERT_CHAIN}.pem
+openssl pkcs12 -export -in ./${SERVER_PATH}/${BS_SERVER_CERT_CHAIN}.pem -inkey ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}-key.pem -out ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}.p12 -name ${BS_SERVER_CERT_ALIAS} -CAfile ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem -caname ${CA_ROOT_ALIAS} -passin pass:${STORE_PASS_PWD} -passout pass:${STORE_PASS_PWD}
+keytool -importkeystore -deststorepass ${STORE_PASS_PWD} -destkeypass ${STORE_PASS_PWD} -destkeystore ./${SERVER_PATH}/${SERVER_JKS_FOR_TEST}.jks -srckeystore ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}.p12 -srcstoretype PKCS12 -srcstorepass ${STORE_PASS_PWD} -alias ${BS_SERVER_CERT_ALIAS}
+
+
+keytool -list -v -keystore ./${SERVER_PATH}/lwm2mserver.jks -storepass server_ks_password -storetype PKCS12
+
+rm ./${SERVER_PATH}/*.p12 2> /dev/null
+rm ./${SERVER_PATH}/*.csr 2> /dev/null
+rm ./${SERVER_PATH}/*.json 2> /dev/null
+rm ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY_PREF}* 2> /dev/null
+rm ./${SERVER_PATH}/${CA_ROOT_CERT_KEY}* 2> /dev/null
+mv ./${SERVER_PATH}/${SERVER_CERT_KEY}-key.pem ./${SERVER_PATH}/${SERVER_CERT_KEY}_key.pem
+mv ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}-key.pem ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}_key.pem
+