Revise cert-spec

There is a lot more to do, but this makes the spec up-to-date and gives it an accurate description of every cert type, with cross-links to appropriate documentation elsewhere.