Now using our own CA, lowered gzip level, fixed some TLS config issues.