Jbau/jrbl/starting certs work

new PR just to do the nginx configuration portion of certs.