https://wiki.yandex-team.ru/balancer/cookbook/#kaksgenerirovatsertifikatydljabalanceeravruchnuju
https://a.yandex-team.ru/arc/trunk/arcadia/balancer/production/x/gen_certs
https://wiki.yandex-team.ru/cplb/howtocreatebalancer/#podgotovkassl-sertifikatov

Example:
```
$ ./gen-certs.sh *.awacslet.yandex.net
$ openssl x509 -in './certs/*.awacslet.yandex.net.crt' -out './allCAs-_.awacslet.yandex.net.pem' -outform PEM
$ openssl rsa -in './certs/*.awacslet.yandex.net.key' -out './_.awacslet.yandex.net.pem' -outform PEM
$ ./make-secrets-tgz.sh
```

To get root CA pem:
```
$ openssl x509 -in ./certs/root_ca.crt -out ./rootCA.pem -outform PEM
```
