christoph: root + ssl + ca + thawte