openSSL creates three types of certificates