https://www.johndball.com/multi-part-series-on-securing-our-internet-presence-certificate-security-and-more/