added remark about CVS rev. 1.1-1.3 which never contained valid certs