Remind me again why we can't use HTTPS certificates to sign code that is linked with a domain?