Guide: better explanation about push service certificates