update README with certificate instructions