diff --git a/CHANGELOG.md b/CHANGELOG.md
index 08f122975..4754c989f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 15.05.2015
 
+* Refer to doc/certificates.md for ID card login, note that CRL files in Apache config are not paths to CRL directory. (SSLCARevocationFile -> SSLCARevocationPath)
+
+15.05.2015
+
 * Added instractions for apache2 reload without password for Registrant/Registrar, 
   more info at doc/certificates.md
 
diff --git a/doc/certificates.md b/doc/certificates.md
index d5297da26..d611add2e 100644
--- a/doc/certificates.md
+++ b/doc/certificates.md
@@ -211,15 +211,15 @@ Make sure you have this line in application.yml:
 
     crl_dir: '/home/registry/registry/shared/ca/crl'
 
-In rails console:
+After deploy, in rails console:
 
     Certificate.update_crl
 
 Update whenever:
 
-    
+    mina whenever:update
 
-Configure apache:
+Configure Apache (set location according to registrant and registrar):
 
     <Location /registrant/id>
         SSLVerifyClient require