Allow different TLS certificates per API

Currently we only use one TLS cert for all APIs. We should allow one cert per API, as each API could have different security requirements or certifications.