http://blog.schertz.name/2013/01/lync-server-certificate-cliff/