Add proper certificates for S3

Commit @71bc866 did not add the correct certificates as show by the test
from #673.  Now we have a tool to determine the correct certificates by
automatically from a certs.pem.

This updates #665 and #671.