README.md: improve to list all required steps
certmaker.sh: use printf instead of echo to avoid "bashism", remove cargo-culted "dd if=/dev/random"