Support multiple container cert directories.

Due to redirects, docker will need to communicate with both a crane host, and
then the CDN.
Fix cert/key filenames for container plugin.

Base filename should match, so stop naming them SERIAL-key.key and instead just
SERIAL.key.