clarify cert docs