Typo fixes and headerdoc typo fixes.
Clarify intended way of providing certs.

We wouldn't want people to replace the test certs with theirs on Github and possibly expose them.
Document expected setup of certs in production here, too.