---
---

ssl_client_certificate {{ site.cert-path }}/client-ca-untrusted-root.pem;
ssl_verify_client on;