Perhaps this article answers some of your questions: https://www.sslshopper.com/why-ssl-t...tificates.html