See [wiki:"faq/security/get-certificate"].