pub fn new_self_signed_tls_certificate_chain(
    keypair: &Keypair,
    san: IpAddr
) -> Result<(Vec<Certificate>, PrivateKey), Box<dyn Error>>