More extensive comment on HTTPS certificates