Acquiring TLS certificates at runtime