Fix tls key and cert file defaults

Since this role now depends on franklinkim.openssl its fair to assume its file
format will be used - that means .crt and .key are appended to the hostname
automatically.