More TLS documentation

Certificate generation, more loose options, more explanation on why weak algorithms / keys are bad...