Penetration test of a web interface for issuing certificates