cert-spec: improve signature formulation

I personally had a hard time implementing the signature validation in Ed25519 certificates, as I have misinterpreted it as signing only the first 64 bytes.

I hope that this patch puts more clearance into the material.