https://program-think.blogspot.com/2010/02/introduce-digital-certificate-and-ca.html