Add root CA support for mTLS authentication

[daniel-butler-irl]

Adding this support as my hosted elasticsearch instances have self-signed certs and I do not want to run with the insecure attribute. This is my first time working on provider code but I think I covered all the tests and docs required. If there are any updates needed please let me know. Thanks