Ready: Certificate configuration

Responding to issue #1252

@macintux I'm not sure if this is exactly what you had in mind, so feedback very welcome