Allow certificate paths to be http/https urls.

Building upon the ideas presented in #2 but having the certificate downloading happen at certificate upload time.