Add ability for certificates to be a URL.

This allows for corporate bundles to be stored on a single location such
as S3 or some other internal HTTP endpoint. We utilize the internal
Vagrant utility for downloading files and store them in a temporary
directory.