Ready: Certificate configuration

Responding to issue #1252

@macintux I'm not sure if this is exactly what you had in mind, so feedback very welcome
Just as an FYI I did test with self-signed certs but I also had `cacertfile` pointing to my Root CA file.