michal@laptop:~$ curl -vvvv -d -k --cacert ./ca.crt  --cert ./DigitalVirgo.crt --key ./DigitalVirgo.key https://oapi.play.pl/api/payments/
*   Trying 89.108.195.69...
* Connected to oapi.play.pl (89.108.195.69) port 443 (#0)
* found 1 certificates in ./ca.crt
* found 704 certificates in /etc/ssl/certs
* ALPN, offering http/1.1
* SSL connection using TLS1.2 / ECDHE_RSA_AES_256_GCM_SHA384
* 	 server certificate verification OK
* 	 server certificate status verification SKIPPED
* 	 common name: oapi.play.pl (matched)
* 	 server certificate expiration date OK
* 	 server certificate activation date OK
* 	 certificate public key: RSA
* 	 certificate version: #3
* 	 subject: C=PL,ST=Poland,O=P4,OU=OAPI,CN=oapi.play.pl
* 	 start date: Thu, 12 Nov 2015 12:09:49 GMT
* 	 expire date: Sat, 11 Nov 2017 12:09:49 GMT
* 	 issuer: C=PL,ST=Poland,L=Warsaw,O=P4,OU=OAPI,CN=OAPI-CA
* 	 compression: NULL
* ALPN, server did not agree to a protocol
> POST /api/payments/ HTTP/1.1
> Host: oapi.play.pl
> User-Agent: curl/7.47.0
> Accept: */*
> Content-Length: 2
> Content-Type: application/x-www-form-urlencoded
>
* upload completely sent off: 2 out of 2 bytes
< HTTP/1.1 401 Unauthorized
< Date: Fri, 01 Jul 2016 11:38:57 GMT
< Server: Apache/2.4.6 (CentOS) Phusion_Passenger/5.0.21
< Cache-Control: no-cache
< X-Runtime: 0.007547
< X-Frame-Options: SAMEORIGIN
< X-XSS-Protection: 1; mode=block
< X-Content-Type-Options: nosniff
< X-Request-Id: ff705423-3369-4a20-b244-f7d2d2bd7d0d
< X-Powered-By: Phusion Passenger 5.0.21
< Vary: X-Oapi-Auth
< Status: 401 Unauthorized
< Content-Type: application/json; charset=utf-8
< Set-Cookie: request_method=POST; path=/
< Connection: close
< Transfer-Encoding: chunked
<
* Closing connection 0
{"status":"unauthorized","description":"appkey required"}michal@laptop:~$