Can I distribute certificates used for Wi-Fi and VPN?

Yes, you can distribute them by using a custom profile.
Set the profile type to "Custom", and distribute a set of three items that combines the profile with the following:

• A CSV file that specifies the combinations of devices and certificate files
• A ZIP file that bundles the certificates

For how to configure it, see here.