/etc/ssl/certs/ca-certificates.crt
self-signed.badssl.com
SIMPLE
\"wrong.host.badssl.com\"
VERIFY_CERTIFICATE_AT_CLIENT = true