Make certificate swapping easier for enx-redirect

[icco]

Proposed Changes

• If you are using enx-redirect, and you modify the map variable, this will recreate the cert, which will create unknown amounts of downtime. So instead, you need to manually create a new cert with the new domains, append it to the FE, and then wait for it to become healthy, and then change the FE again by removing the old cert.
• This changes the FE to use two certs, so that the "main" cert is just www. and then the region domains are on a separate cert, this makes the above process easier.
• Also split the two LBs into separate files.

Release Note

Changes the certificates on the redirect server.

[sethvargo]

/lgtm

[google-oss-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: icco, sethvargo

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [icco,sethvargo]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[google-oss-robot]

New changes are detected. LGTM label has been removed.