Index: net/data/ssl/certificates/README |
diff --git a/net/data/ssl/certificates/README b/net/data/ssl/certificates/README |
index e0f22a2e711aa91f9b4bfdcc3cf347c7de48bbd1..e4e7e6498a3d025c681d296b95b2c3ff7558c941 100644 |
--- a/net/data/ssl/certificates/README |
+++ b/net/data/ssl/certificates/README |
@@ -183,3 +183,13 @@ unit tests. |
The .pem versions contain just the certs, while the .p12 versions contain |
both the cert and a private key, since there are multiple ways to import |
certificates into NSS. |
+ |
+- aia-cert.pem |
+- aia-intermediate.der |
+- aia-root.pem |
+ A certificate chain which we use to ensure AIA fetching works correctly |
+ when using NSS to verify certificates (which uses our HTTP stack). |
+ aia-cert.pem has a caIssuers that points to "aia-test.invalid" as the URL |
+ containing the intermediate, which can be served via a URLRequestFilter. |
+ aia-intermediate.der is stored in DER form for convenience, since that is |
+ the form expected of certificates discovered via AIA. |