add instructions for certificate file extraction