https://www.petervanderwoude.nl/post/certificates-needed-for-native-mode/