christoph: thawte + ssl + 2011 + ca