(DOC-637) Note recommended and disallowed values for certname

This ticket will have a companion commit in the Puppet repository.