openssl s_client -connect signed.bad.horse:443 -servername signed.bad.horse