diff --git a/mdx/nl_surfconext/readme.md b/mdx/nl_surfconext/readme.md
new file mode 100644
index 00000000..238600c1
--- /dev/null
+++ b/mdx/nl_surfconext/readme.md
@@ -0,0 +1,8 @@
+# `nl_surfconext` Channel
+
+The certificate in `engine.surfconext.nl.pem` is new as of 2014-05-05 and applies to metadata retrieved from a new endpoint:
+
+* <https://engine.surfconext.nl/authentication/idp/metadata/key:20140505>
+* <https://engine.surfconext.nl/authentication/idp/metadata/key:20140505?sp-entity-id=urn:example.org>
+* <https://engine.surfconext.nl/authentication/proxy/idps-metadata/key:20140505?sp-entity-id=urn:example.org>
+