please note that i am talking about SSH certificate, not SSL certificate. https://ef.gy/hardening-ssh