https://blog.cscholz.io/hpkp-creation-validation/