--x509cafile=authority/x509.pem --priority=NORMAL --sni-hostname=example.virtual.host