add some comments about what we are testing.

Also, do the same work for Server and Client certs as well as the CA cert.