https://blog.frankleonhardt.com/2009/1ssl-cert/