spec: TLS certificates: avoid MD5

Make it clearer in the spec, where talking about certificates, that MD5
in certs is a really Quite Bad idea.