https://harfanglab.io/insidethelab/hijackloader-abusing-genuine-certificates/