trying out different cert configs for test, confused by openssl