From fe5b1125b944f5445a1257f9304b648ebb514fed Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Mon, 26 May 2014 16:59:24 +0000
Subject: [PATCH] Add some information about the SURFconext key change.

---
 mdx/nl_surfconext/readme.md | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 mdx/nl_surfconext/readme.md

diff --git a/mdx/nl_surfconext/readme.md b/mdx/nl_surfconext/readme.md
new file mode 100644
index 00000000..238600c1
--- /dev/null
+++ b/mdx/nl_surfconext/readme.md
@@ -0,0 +1,8 @@
+# `nl_surfconext` Channel
+
+The certificate in `engine.surfconext.nl.pem` is new as of 2014-05-05 and applies to metadata retrieved from a new endpoint:
+
+* <https://engine.surfconext.nl/authentication/idp/metadata/key:20140505>
+* <https://engine.surfconext.nl/authentication/idp/metadata/key:20140505?sp-entity-id=urn:example.org>
+* <https://engine.surfconext.nl/authentication/proxy/idps-metadata/key:20140505?sp-entity-id=urn:example.org>
+