https://mamchenkov.net/wordpress/2017/02/01/dissecting-an-ssl-certificate/