Logging improvements around TLS certs