updated README to explain removal of explicit ca certificates