https://www.eff.org/deeplinks/2014/11/certificate-authority-encrypt-entire-web