This is next level of dealing with certificates. Great job by Matt Hold and open source community on Certmagic module. Read his twitter thread on the subject.