TLS certificates for internal services done SIMPLER

Follow-up for "done right" that could be titled "done GOOD ENOUGH"