Update README to properly describe certificate

Addresses @dstufft's comment on #499