diff --git a/keys/.gitignore b/keys/.gitignore
new file mode 100644
index 0000000..c6a1c50
--- /dev/null
+++ b/keys/.gitignore
@@ -0,0 +1,10 @@
+*.jks
+*.crt
+*.b64
+*.p12
+*.csr
+*.keystore
+
+*.cer
+*.key
+*.certSigningRequest
diff --git a/keys/apk/this-is-for-android b/keys/apk/this-is-for-android
new file mode 100644
index 0000000..e69de29
diff --git a/keys/apns/this-is-your-push-certificate-with-apns b/keys/apns/this-is-your-push-certificate-with-apns
new file mode 100644
index 0000000..e69de29
diff --git a/keys/certificates/this-is-your-xcode-certificate b/keys/certificates/this-is-your-xcode-certificate
new file mode 100644
index 0000000..e69de29
diff --git a/keys/client/make b/keys/client/make
new file mode 100755
index 0000000..b70d645
--- /dev/null
+++ b/keys/client/make
@@ -0,0 +1,3 @@
+keytool -genkeypair -alias client -keyalg RSA -keysize 2048 -keystore keystore.jks
+keytool -export -alias client -keystore keystore.jks -rfc -file selfsignedcert.cer
+keytool -import -alias client -file selfsignedcert.cer -keystore truststore.jks
diff --git a/keys/james/final/post-process b/keys/james/final/post-process
new file mode 100755
index 0000000..d1d296e
--- /dev/null
+++ b/keys/james/final/post-process
@@ -0,0 +1,4 @@
+cp ../mail_mailiverse_com.jks .
+#keytool -import -trustcacerts -alias root -file ../mail_mailiverse_com/AddTrustExternalCARoot.crt -keystore mail_mailiverse_com.jks
+keytool -import -trustcacerts -alias POSITIVESSL -file ../mail_mailiverse_com/PositiveSSLCA2.crt -keystore mail_mailiverse_com.jks
+keytool -import -trustcacerts -alias james -file ../mail_mailiverse_com/mail_mailiverse_com.crt -keystore mail_mailiverse_com.jks
diff --git a/keys/james/make b/keys/james/make
new file mode 100755
index 0000000..7655c59
--- /dev/null
+++ b/keys/james/make
@@ -0,0 +1,2 @@
+keytool -genkeypair -alias james -keyalg RSA -keysize 2048 -keystore mail_mailiverse_com.jks
+keytool -certreq -alias james -keyalg RSA -file mail_mailiverse_com.csr -keystore mail_mailiverse_com.jks
diff --git a/keys/james/this-is-the-official-mail-server-ssl-certificates b/keys/james/this-is-the-official-mail-server-ssl-certificates
new file mode 100644
index 0000000..e69de29
diff --git a/keys/key/make b/keys/key/make
new file mode 100755
index 0000000..a8d860f
--- /dev/null
+++ b/keys/key/make
@@ -0,0 +1,3 @@
+keytool -genkeypair -alias piratekey -keyalg RSA -keysize 2048 -keystore keystore.jks
+keytool -export -alias piratekey -keystore keystore.jks -rfc -file selfsignedcert.cer
+keytool -import -alias piratekey -file selfsignedcert.cer -keystore truststore.jks
diff --git a/keys/localrelay/make b/keys/localrelay/make
new file mode 100755
index 0000000..972242d
--- /dev/null
+++ b/keys/localrelay/make
@@ -0,0 +1,3 @@
+keytool -genkeypair -alias localrelay.mailiverse -keyalg RSA -keysize 2048 -keystore keystore.jks
+keytool -export -alias localrelay.mailiverse -keystore keystore.jks -rfc -file selfsignedcert.cer
+keytool -import -alias localrelay.mailiverse -file selfsignedcert.cer -keystore truststore.jks
diff --git a/keys/localrelay/this-is-the-key-file-for-the-web-mail-submission b/keys/localrelay/this-is-the-key-file-for-the-web-mail-submission
new file mode 100644
index 0000000..e69de29
diff --git a/keys/mail/make b/keys/mail/make
new file mode 100755
index 0000000..660cfd0
--- /dev/null
+++ b/keys/mail/make
@@ -0,0 +1,3 @@
+keytool -genkeypair -alias piratemail -keyalg RSA -keysize 2048 -keystore keystore.jks
+keytool -export -alias piratemail -keystore keystore.jks -rfc -file selfsignedcert.cer
+keytool -import -alias piratemail -file selfsignedcert.cer -keystore truststore.jks
diff --git a/keys/nginx/clean b/keys/nginx/clean
new file mode 100755
index 0000000..bd5bf18
--- /dev/null
+++ b/keys/nginx/clean
@@ -0,0 +1,2 @@
+rm store.*
+rm final.*
diff --git a/keys/nginx/convert b/keys/nginx/convert
new file mode 100755
index 0000000..b3bf38b
--- /dev/null
+++ b/keys/nginx/convert
@@ -0,0 +1,12 @@
+set -x
+
+JKSSTORE=mail_mailiverse_com.jks
+cp $JKSSTORE store.jks
+
+keytool -importkeystore -srckeystore store.jks -srcstoretype JKS -deststoretype PKCS12 -destkeystore store.p12
+openssl pkcs12 -in store.p12 -nocerts -out store.key
+openssl rsa -in store.key -out final.key
+
+cat mail_mailiverse_com.crt > final.crt
+cat PositiveSSLCA2.crt >> final.crt
+cat AddTrustExternalCARoot.crt >> final.crt
diff --git a/keys/nginx/this-is-the-mail-server-ssl-certificate-modified-to-work-with-nginx b/keys/nginx/this-is-the-mail-server-ssl-certificate-modified-to-work-with-nginx
new file mode 100644
index 0000000..e69de29
diff --git a/keys/push/make b/keys/push/make
new file mode 100755
index 0000000..b70d645
--- /dev/null
+++ b/keys/push/make
@@ -0,0 +1,3 @@
+keytool -genkeypair -alias client -keyalg RSA -keysize 2048 -keystore keystore.jks
+keytool -export -alias client -keystore keystore.jks -rfc -file selfsignedcert.cer
+keytool -import -alias client -file selfsignedcert.cer -keystore truststore.jks