pub fn default_cert_dir() -> PathBuf
Where on-disk certs live. Layout: {base}/certs/{domain}.{pem,key}.
{base}/certs/{domain}.{pem,key}