https://rakhesh.com/infrastructure/certificate-stuff-as-a-note-to-myself/