Document the "API" of the certs directory more strictly

[mithrandi]

Because we may want to add things like #27 in future, I'm going to reserve all non-documented paths under the certs dir that the endpoint uses for future use.