https://rakhesh.com/infrastructure/notes-on-adfs-certificates/