added working ssl locally
added process.env.PASSPHRASE
got a ca signed ssl, test on server now