Try to move GetCertificate to internal/tls

Implementation guide

The following discussion from !700 (merged) should be addressed:

  • @jaime started a discussion: (+1 comment)

    could this be in internal/tls/ and expose GetTLSConfig() ? Or are there some circular dependencies with domain?

Edited by Vladimir Shushlin