Tweaked the description of how the certificates are bound to the private key in the jar signing jks file.