diff --git a/xt/certs-and-keys/ca-crt.pem b/xt/certs-and-keys/ca-crt.pem
index 759fe04..4981b88 100644
--- a/xt/certs-and-keys/ca-crt.pem
+++ b/xt/certs-and-keys/ca-crt.pem
@@ -1,32 +1,32 @@
 -----BEGIN CERTIFICATE-----
-MIIFlTCCA30CFE+PvS43SSIUD/GeXX7wHwbd1HfFMA0GCSqGSIb3DQEBCwUAMIGG
+MIIFlTCCA30CFFHFks1TL46IJUx/ZZ4aH1O/OpXeMA0GCSqGSIb3DQEBCwUAMIGG
 MQswCQYDVQQGEwJDWjEYMBYGA1UECAwPQ2VudHJhbCBCb2hlbWlhMQ8wDQYDVQQH
 DAZQcmFndWUxCzAJBgNVBAoMAkNBMQswCQYDVQQLDAJJVDESMBAGA1UEAwwJbG9j
-YWxob3N0MR4wHAYJKoZIhvcNAQkBFg9mb29AZXhhbXBsZS5uZXQwHhcNMjIxMDMx
-MTc0NjIwWhcNMjMxMDMxMTc0NjIwWjCBhjELMAkGA1UEBhMCQ1oxGDAWBgNVBAgM
+YWxob3N0MR4wHAYJKoZIhvcNAQkBFg9mb29AZXhhbXBsZS5uZXQwHhcNMjQwNzE4
+MTI0ODQyWhcNMjUwNzE4MTI0ODQyWjCBhjELMAkGA1UEBhMCQ1oxGDAWBgNVBAgM
 D0NlbnRyYWwgQm9oZW1pYTEPMA0GA1UEBwwGUHJhZ3VlMQswCQYDVQQKDAJDQTEL
 MAkGA1UECwwCSVQxEjAQBgNVBAMMCWxvY2FsaG9zdDEeMBwGCSqGSIb3DQEJARYP
 Zm9vQGV4YW1wbGUubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
-vX/5oYUty4ytpcs8k0xei99NDuXAZ3OX97SHasmbGW65CJaXHIkeZQOGcfUiM0ul
-4GmzrtV9LkPkc6gmsKcG2g1QlAmVM2IHcdcXOwVhD2FR9Wid127YWu9tkeRUh/xV
-Jt0mjEimRCyojzmIJR03DdzFoIbWvmWU1EV3ATYHkiRS+Qh/UljXlM+rUb4KIVBq
-3s1wh9k0A4teGxI15bNKvqaKz2QPT5iBV0We/g7G/67XCrwWgFyYBOs0fQp1QsSY
-T9lHC+PErNN/JkoLHSTAaxQSwP0LKiSoc0m3MlpYJJ6nNar/rM04fSayss3dcdTN
-3wn6zY0tiQ6X1yRYMN+egyfFXtrd+NKBhfEAf10/Ti0kjyjjwQiFzc3ZRNooBjN/
-okkPel+BpKSpH8I74PCN/sWgSe/gk4pthlzYEDuFcMBsEDgFLDlwz0zVl6KTq1o0
-MHmAg8cy2zumGV9fqujlkoDtN0jEzMrQsfPjtXnEJ5l+/OYVWtKgV6y0aKif2XlI
-iIviNn9tc5jiCTi6Q18bAuCLyACf6aYDobb6ePPg05ljonHAH6Dw1pBRDygryC5w
-pJMcC/eatgkEzNPUWNEKCFLqUPEwOWJ1ijSkdk6u3t9VbasIGaUoA53Z39C0oN/s
-yIrTmbNenGDlv0qtCX29aEIbEhJnE3AOErPIySucZbMCAwEAATANBgkqhkiG9w0B
-AQsFAAOCAgEAa76lLSwlYdjPs9ssrYIXszB1/ffQl2LI3D8QUghxbbHugb4KB/Kh
-XexXaS7yA+kWflOy9Pb2pDN5XpUsDnKbmAZz7jcFBO6smuyLcmuG/4hjTZ/rVT9x
-NkJ2RLR6Xd6SQXwwcm7w7m5QjdS4IH4Uf0Rn8aHOaxqDD4ylzL1aAbl3qHJ/ffmm
-ydoye+XZuSgdFeV7I8shq1KPHL5vcrxzQGpBjKsVN85xCZ/dB7S29XEg2klN4/Lt
-xFeLYR5skJw391Fb75Yda1udiPygTnXwcTqIfbKyoddWS38oKW3a4VzZ2IbGmO3L
-VnD2sOqRN7e/gr56w0MTGu1BGaO4sDyYwKWDisrkgtG3DziZiYJgFQ6Njc8TF3Nt
-xtIsAigkVOptvH6bn7Kojq172W8DZ5xdVt6J3xSliqYYsS4GIFZfCC1WQlCQ28ow
-ZVvieNX8sIO0os4yGI0qk1Si44jplgMbRXQMqHKm7mpTpBSVt7hGdLS5/C7ObAxG
-kaNJ+QLc5Ly5sS8CvfsdVA6YZqS/xsYajeGt74SjHo+BkpTFeQhK6Lm9Hb0tXQGc
-FNlJtkaGdgju6K/0Yujl4l4Ql2pMQqEzb7RLBq+6ZhZe5Eue3eHqHNbZ0unkc3fs
-utxyJ5XAAMIDGTRU+3270CE3qpN32TJJGpRBp6ehKi2V3j3FrhnFH3w=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 -----END CERTIFICATE-----
diff --git a/xt/certs-and-keys/my.conf b/xt/certs-and-keys/my.conf
new file mode 100644
index 0000000..ac035fc
--- /dev/null
+++ b/xt/certs-and-keys/my.conf
@@ -0,0 +1,21 @@
+[req]
+default_bits = 4096
+prompt = no
+default_md = sha256
+req_extensions = req_ext
+distinguished_name = dn
+
+[dn]
+C = CZ
+ST = Central Bohemia
+L = Prague
+O = CA
+OU = IT
+CN = localhost
+emailAddress = foo@example.net
+
+[req_ext]
+subjectAltName = @alt_names
+
+[alt_names]
+DNS.1 = localhost
diff --git a/xt/certs-and-keys/server-crt.pem b/xt/certs-and-keys/server-crt.pem
index 626653e..0321f67 100644
--- a/xt/certs-and-keys/server-crt.pem
+++ b/xt/certs-and-keys/server-crt.pem
@@ -1,37 +1,33 @@
 -----BEGIN CERTIFICATE-----
-MIIGiTCCBHGgAwIBAgIUBxjJlQLyHLF9qA4Ud3zPzYReLw0wDQYJKoZIhvcNAQEL
+MIIFtTCCA52gAwIBAgIUNw3+PPkeLwOZb5U+4bTxdNXdHogwDQYJKoZIhvcNAQEL
 BQAwgYYxCzAJBgNVBAYTAkNaMRgwFgYDVQQIDA9DZW50cmFsIEJvaGVtaWExDzAN
 BgNVBAcMBlByYWd1ZTELMAkGA1UECgwCQ0ExCzAJBgNVBAsMAklUMRIwEAYDVQQD
 DAlsb2NhbGhvc3QxHjAcBgkqhkiG9w0BCQEWD2Zvb0BleGFtcGxlLm5ldDAeFw0y
-MjEwMzExNzQ2MjFaFw0yMzEwMzExNzQ2MjFaMIGHMQswCQYDVQQGEwJDWjEYMBYG
+NDA3MTgxMjQ4NDNaFw0yNTA3MTgxMjQ4NDNaMIGHMQswCQYDVQQGEwJDWjEYMBYG
 A1UECAwPQ2VudHJhbCBCb2hlbWlhMQ8wDQYDVQQHDAZQcmFndWUxDDAKBgNVBAoM
 A2ZvbzELMAkGA1UECwwCSVQxEjAQBgNVBAMMCWxvY2FsaG9zdDEeMBwGCSqGSIb3
 DQEJARYPZm9vQGV4YW1wbGUubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
-CgKCAgEAyRhmS2bxJ0bqPboQaLz+c11scWo4LQ0AOqUuYxfBv+gjXTxZGriAvMlg
-MPqZJDC0cZ2GHtsWyctpsueb1oqhtJaGI5Fn+yREH8CWZoaSfdadAMGAx5Lqia8h
-y+MYoIJFTHVV6WQei/nhEBp7Js1mxtoAZ14wHU9OrndLZRq7jPXlzeVoHd7l4kZN
-wLcgx5C4yMZrjxVsId7HOQpK45FErkIDQ/INmejGRZSqTeKXge5a/kvxYB9CacxA
-Vd31azgiz1FzgE7uyDOiW314KEGfAZvc1+8M/jYnm6g/881uIza6n3dcNDM5XorG
-4mreSWmdZ7Hsp95bICydQqR7QvXaOq9uh09w70BPPqrs6w/fyGFbqqdEYgQYcdq7
-Y3+LLaCBoe+ODFKjBb/4cfHRT3oaOc2rIW8smv2iJtX7jVTWodIRhwIxJEEk16Qi
-4eGiJ/GyF1A8zZSJADdQAGQR94U7lH14KD+LWDzWpLJX8NG3flVb77RQ4Lou1zvG
-8QR4a8kyTUaqO/9lMQ+pUNZdwGyGIltStQMVYwBiQ0P3pfy1M4eVcb4GsqpjYDz5
-uv/KVAY+aV0EcYPWwN4m5rE4ot6syaedHytZPdzD4ADTGm6cbCMvq6KOv1Cy5iFh
-MbV52UoDZ06ZAv8pBibzsVaCliokjQ1Z6FPlKVFPmxL8fGqwG+ECAwEAAaOB6zCB
-6DAUBgNVHREEDTALgglsb2NhbGhvc3QwHQYDVR0OBBYEFNQyw8lTABkdgIiErRUJ
-ZS043Ry0MIGwBgNVHSMEgagwgaWhgYykgYkwgYYxCzAJBgNVBAYTAkNaMRgwFgYD
-VQQIDA9DZW50cmFsIEJvaGVtaWExDzANBgNVBAcMBlByYWd1ZTELMAkGA1UECgwC
-Q0ExCzAJBgNVBAsMAklUMRIwEAYDVQQDDAlsb2NhbGhvc3QxHjAcBgkqhkiG9w0B
-CQEWD2Zvb0BleGFtcGxlLm5ldIIUT4+9LjdJIhQP8Z5dfvAfBt3Ud8UwDQYJKoZI
-hvcNAQELBQADggIBAF0JfUOrt6L2Ig4i3KmFmX6pnS59OoXv9F3yydJ0s6jDLhnv
-amg/tUONaG/2W+2N+diBGLxfZoi1rtD3KQ1GDKwzMT7y1eMDzkZltfimADsMljdv
-+gPv+C3xe6WuKSaSwEcK9OJJxlg2SLYpTkopYk6oiBd257OLWAIZX1GiL6+GDWoZ
-p6uOtte6BGg2w1WjYB+yKawoLiBFZN67/QhHhYuRf8cHPYF3LCb7kzspcf4tAu29
-xLjftIV8hhO+q4sZSQafQR1lEff1NGZKPyObNSUHFVHf6sIOiY4L32X3CZldnhEN
-NtsSlnVLuJwHBBZpoAqbMpoNQLKmCcHylpV3z9Pm0tfii/IFq5cP8eOHNsrRTUS/
-5cJyjkuEE11jlY6cDBl8zSf1A8M+hTIqNu4V1PoH8zgQ/H+f5vYwrbgfYKo9GcRw
-9wLiYkuvptrGaZva+EvO49SHuU+UIjVjhbb4IYq0j2alqWcBvWX59aRR+stRY8SO
-BINliqyHPHJsTTSJFK4Dr5mklTGpddTFx4kYZ0shkzicC2Vt5r4vpL9x7sV5HP8K
-UNvuFl5yiDBeaw+nTkctRazcRgjPfCg94faG4o7PVnI34aSBYX4ywmbZ+kHsP1px
-O177c07W3ow+UeuH9PB0VW5nbF+rLpHmUpE4L77bkf5f/h/KjvN4y56Lk3+A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 -----END CERTIFICATE-----
diff --git a/xt/certs-and-keys/server-key.pem b/xt/certs-and-keys/server-key.pem
index 0fc5939..e9e5bb7 100644
--- a/xt/certs-and-keys/server-key.pem
+++ b/xt/certs-and-keys/server-key.pem
@@ -1,52 +1,52 @@
 -----BEGIN PRIVATE KEY-----
-MIIJQQIBADANBgkqhkiG9w0BAQEFAASCCSswggknAgEAAoICAQDJGGZLZvEnRuo9
-uhBovP5zXWxxajgtDQA6pS5jF8G/6CNdPFkauIC8yWAw+pkkMLRxnYYe2xbJy2my
-55vWiqG0loYjkWf7JEQfwJZmhpJ91p0AwYDHkuqJryHL4xiggkVMdVXpZB6L+eEQ
-GnsmzWbG2gBnXjAdT06ud0tlGruM9eXN5Wgd3uXiRk3AtyDHkLjIxmuPFWwh3sc5
-CkrjkUSuQgND8g2Z6MZFlKpN4peB7lr+S/FgH0JpzEBV3fVrOCLPUXOATu7IM6Jb
-fXgoQZ8Bm9zX7wz+NiebqD/zzW4jNrqfd1w0Mzleisbiat5JaZ1nseyn3lsgLJ1C
-pHtC9do6r26HT3DvQE8+quzrD9/IYVuqp0RiBBhx2rtjf4stoIGh744MUqMFv/hx
-8dFPeho5zashbyya/aIm1fuNVNah0hGHAjEkQSTXpCLh4aIn8bIXUDzNlIkAN1AA
-ZBH3hTuUfXgoP4tYPNakslfw0bd+VVvvtFDgui7XO8bxBHhryTJNRqo7/2UxD6lQ
-1l3AbIYiW1K1AxVjAGJDQ/el/LUzh5VxvgayqmNgPPm6/8pUBj5pXQRxg9bA3ibm
-sTii3qzJp50fK1k93MPgANMabpxsIy+roo6/ULLmIWExtXnZSgNnTpkC/ykGJvOx
-VoKWKiSNDVnoU+UpUU+bEvx8arAb4QIDAQABAoICAAOrgrNp1KkY4oMU9hdz6oi4
-Xzd8ftELVDzzFoiCWUZ7XLOHBkvGQKWMCcm/Cw7bENykHrEJt83f54UMtHOrBPDk
-JdzN5VSdo0d5PELGU4kBIuKjMBUvACwvgmmuMnJRyk9kcqMkplOQ5aulm2gtq7cM
-PmFkjvLRUkA9cbEYdqzdBdAsWX+hDveNElPGlnjZ55YUxpypAWJmsSKq+8tRKNcY
-Iec0/8yhJUbauUHHCr45QhcdvkZuL51kF+umljk6QCq3LnPRzPUMTzBbAaI/cgDQ
-I2zGl7QR0Nwmqwseosh4/K6BbxujRdmM5WdiAqjwPjTeIrGSGD47M4qxBdsGxwWj
-6eNzrLpnnYSbrvVh/7Rzuc4wsVsfWacQ5qPNsZui9oWQ/s5MYFQWOcDpiNVzh2uL
-7hBkT+hNsProoEuLMY583br7Rrmt2ZG+mFGGm82ZKE+be/C76gKgfrtM8e9ECbk0
-6Bg8U9lnt70r9XsDaTxORYQfIkt5xU/OFWYle54uRjpN24esnj79SaJhLRycqpV7
-LeM/fYmM4//brU6BFzonaQ62jE742R+mEclYS4lMZNPPcYSmc2jA8iZRpgQiPUnj
-CHhvFgHQz/gtBdePMcp5QsRPsxD0bGowdvghFImtqLLeNM11lYDkm39NdBx8/Q/k
-twkYkOYoZzHFmGfI6bfJAoIBAQD8D3fhGs50OmzZh2noIhVYiSLVYF+MojgUqBap
-+/BI8K8ROjBMtIO3dQ3F4NMJbYAp2yUXFPEDnyxL2VrPRUyVas3q8GjB5pgYGuXH
-2sJysXeuua1yNeqaQKcdkMTxQtm3q2l+g6eeZuZeMIE5bJFVrUW3eigYf6tRQ4YN
-v2Cg3fANFgJNIjErVxC8oTrBH9fpGoWUTtbFEwN3WisDRV+4HCDSIbTsTY/9Mfbp
-YtAehVk8R/IjH4gWz7EG/QOUa4Vwfatb9z6Xm1+BPAArAZhVc/RGUFWi9gzkINhF
-aGu5HZhp/mHM47Z4pBL7VI9p/4ciB1dRR0wjpKuOMBJ8mlPpAoIBAQDMPQMgx61E
-bHThur/VU3UICTV1ru6GmYiJpT16EVcsEIKHoiBH1CKvWv0V8FQfgo1ZFspmvlup
-YgkLdXwXXpWrnqGLifqmObTZmRq3C5YOSRl2kbtKTnlK0+hJh/mWRBKUyqeQs47t
-1QREsVrEYEiGnBwsGxedh3yYe9LeljonQI7BvBDIefeCqD2XKArAXDnkFvijUteE
-gmDNyKsqAojgSwxaTrRY1UEofZxZET8Njd9d9ib35SJRViLhsgqhLjLoSe/1bE9X
-eAm1TSb5SPBrm28zWlIi88CWjVa+JdTMQetqjmBLnZk3IeVWrTkJkTNhA8lzRhYw
-3YcDsd8upOU5AoIBACXBx2pP0qc0bUO0dhfQqzPk7vPZiNaPIilt+F8kHx09+Gtz
-NPL4g1aC0TpX8CTUY0Nh0U+A0o2BVWhTObgcoFktc4UC2B5bhWLu/IaQbVoy3UOu
-Cp42F1td3eqe2fFt2yEZKydJX11p+o4XY/QPIEIeP3g5czIgRbBZlgYPKdFPDXtY
-VaXqPkVIuHgZCq0NMRF46JOLr747l+RT/Gd0B9+TTxNK+0f+YlhCGMNjCtvXi8Ns
-34eFXKRWHiV21wdvh8CPApE3GwgovQilzTyj84axZOD3fax4gPvXM65J8wD6vu75
-rPq9DYNKyJEfXJA7N6nQQbMqI+ye6RfWeZ5ym6kCggEALV5IOZnhdVeaRyJSxrJ5
-RsW06GVpeuDUIa9hDqKXeKRaOoLbJNmMsuNFYQA3z6ASgf28DEKw3dl3JOJ+JDrQ
-iIT+YZ7O3OnosIWAF7UtKhM24s3QitsPun2EFgFsgeKxNfgmbNBWKaKuBgxXm1PA
-CJbY8zs5bbbRCJZI60T3ugxvKb37BG2De7SfqdotOTnDalVn+e/HDBpiIpQ24Wga
-u6gwIEdnbGxCwxnUBzz7gqlHOvoZAewWSXcW3IfOMKuwh0UVVrEulsGFdo6i37FC
-JsUqWH/xyu3WlBrlb+u7b3wdLVhfL6zcghC3fx+Pkf59KUnMEB07hLNQ8JMsfpIG
-kQKCAQAMvSl0B5XzGgO5qPjevGo8DOU7FfzDr3rhqtCDlKrNO3MAEgTt/NV5ZtIz
-pnqEi0K8GvcjR/N7fcPBDECZYsDH6O0b3KB8x/9Sfscy57Dq3h8uVNpyjW7jItma
-ZNKLVqDXYBHzZa+MU3own0k8eUtKWJHYC7kHQqI8tigS/GDh77pNH8uCHUnFpJNu
-RRhvhbicrI+T4Mf+8ayXOSDXTtLTsOp0r9CGNKMUXiVWLJvunhOnjM2aO5Uk6J3X
-DGUZV3AvAGgaETexM+TV5TCXZiEDbTS+nL1rvAlNIBBQrJMjlf2i7LhfyYJpOgmf
-UwsmpO9yrKDeXVRi6YIrWQNHKEn7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 -----END PRIVATE KEY-----
diff --git a/xt/certs-and-keys/tls.sh b/xt/certs-and-keys/tls.sh
new file mode 100755
index 0000000..6c00ffe
--- /dev/null
+++ b/xt/certs-and-keys/tls.sh
@@ -0,0 +1,19 @@
+#!/bin/sh
+
+# Generate self signed root CA cert
+openssl req -days 365 -config my.conf -nodes -x509 -newkey rsa:4096 -keyout ca.key -out ca-crt.pem -subj "/C=CZ/ST=Central Bohemia/L=Prague/O=CA/OU=IT/CN=localhost/emailAddress=foo@example.net"
+
+# Generate server cert to be signed
+openssl req -nodes -newkey rsa:4096 -keyout server-key.pem -out server.csr -subj "/C=CZ/ST=Central Bohemia/L=Prague/O=foo/OU=IT/CN=localhost/emailAddress=foo@example.net"
+
+# Sign the server cert
+openssl x509 -req -days 365 -in server.csr -CA ca-crt.pem -CAkey ca.key -CAcreateserial -out server-crt.pem -extensions req_ext -extfile my.conf
+
+# Clean up extra files
+rm ca-crt.srl ca.key server.csr
+
+# Verify certs validate correctly
+echo "-----"
+echo "Verifying certs"
+openssl verify -CAfile ca-crt.pem ca-crt.pem
+openssl verify -CAfile ca-crt.pem server-crt.pem