Added missing .pem extension to production cert

The .pem extension that was missing from the production certificate has been
readded.
Fixed permissions for the credentials directory

Credentials directory now has the correct permissions for the tomcat
group.