https://ouyang.me/posts/2012-10-03-import-certificate-from-command-line/