Certinel should also support reloading the rootCA during the runtime

[lingxiang-cf]

When building the internal service, the rootCA will be expired in a short time. It would be better to provide an extension to auto reload the certificate. Currently the code only supports reload the cert and private key.