Support CA-signed SSL certificates for NNTPS

Configuration added to use existing 'generate a self-signed certificate
on the fly' vs. 'use this certificate by thumbprint'