http://blog.schertz.name/2013/10/improved-rmx-certificate-management/