Replace wildcard with one-off certificates

Replace the use of *.wikimedia.org certificate use with
certificates specific to service FQDN.

Change-Id: I2bfb63bf5ff3ac4d407940770bd9b25ebc2e0e61
RT: 6579
Merge "Replace wildcard with one-off certificates" into production