See [wiki:"faq/security/setup-certificate"].