generating ssl seemingly correctly