C2 TLS certs from trusted CA + mTLS

[whatsyourask]

Currently, C2 has its certs generated by a util/ca.go module that creates self-signed certs - too bad. It would be better to shift this implementation to something else like remotely issuing certs from some known cert publishers(?)

Also, I have had a thought to do client authentication or generally shift to mTLS.