Change TLS related defaults and cert handling

What does this MR do?

This MR changes how we configure TLS by default and how the Certificate is managed. The main goal is to improve the install experience, but individual reasoning for every change can be found in the commit messages.

Author's Checklist

For anything in this list which will not be completed, please provide a reason in the MR discussion.

Required

• Ensure a release milestone is set.
• MR title and description are up to date, accurate, and descriptive.
• MR targeting the appropriate branch.
• MR has a green pipeline on GitLab.com.
• When ready for review, MR is labeled workflowready for review per the MR workflow.

Expected

• Test plan indicating conditions for success has been posted and passes.
• Documentation is created or updated.
• Tests are added.

Related issues