Ready: Certificate configuration

Responding to issue #1252

@macintux I'm not sure if this is exactly what you had in mind, so feedback very welcome
Not correct: even without using certificate-based authentication, some subset of the following is required. Self-signed certs may work (not yet proven by my testing) which would eliminate the need for a certificate authority file.