Use CertType enum instead of ssl config prefix

Use CertType enum instead of ssl config prefix #662