add tip on how to avoid generating ssl certs
can be useful for openssl-1.0 users where i don't know what cmdline to suggest atm
