Have you actually tried doing this? It's an absolute nightmare. I tried creating SSL test certs for my websockets implementation and just gave up because I just couldn't get them working with my libraries SSL stream implementation.