Certificate creation: https://mariadb.com/kb/en/library/certificate-creation-with-openssl/