How TLS/SSL and X.509 really works