[README.md] add note about built-in certificates