feat(traefik): add support for default certificate
For things like LDAPS proxying (where clients typically don't send an SNI header) you can tell traefik to serve a default certificate. This MR adds support for default certificates if you use manual certificate management.