Also change path to certificates since previous ones are distribution
specific. They look like Debian path, Gentoo uses different ones.
New path uses same logic as nginx's formula, use known to exist folder
which server most likely has permission to read too since it is its
configuration folder.