v0.2.3 — say where the attachments are and how to detach them

Both certificates now name their attachments, explain that they live inside the
PDF rather than on the page, and give a command-line fallback for viewers that
do not show attachments at all.