Server TLS identity. Non-null → start listens with Soup.ServerListenOptions.HTTPS.
Typical: configure Cert, call Cert.ensure, assign Cert.certificate.