Add support for CA-signed certificates

[dboitnot]

We currently only support for self-signed certificates. Add the ability to provide a certificate and key via Ansible Vault variable.