make ssl cert serial number 'random'
update README