this is why using a self-signed cert sucks: reboot apache and it's been months since i set up the cert and i forgot the password.