https://rud.is/b/2011/06/14/weis-2011-session-2-identity-the-inconvenient-truth-about-web-certificates/