to verify certs generated by letsencrypt, we can do openssl x509 -in server.crt -text -noout. More info here: https://support.asperasoft.com/hc/en-us/articles/216128468-OpenSSL-commands-to-check-and-verify-your-SSL-certificate-key-and-CSR