Move certificate parameters to config