Update README clarifying cert install process