pki: Add a note about constructing RFC 3779 compliant certificates to manpage