diff --git a/docs/en/Deployment/Configuring-OpenIddict.md b/docs/en/Deployment/Configuring-OpenIddict.md
index c711a5cc45..b044bcb275 100644
--- a/docs/en/Deployment/Configuring-OpenIddict.md
+++ b/docs/en/Deployment/Configuring-OpenIddict.md
@@ -41,3 +41,7 @@ You can use the `dotnet dev-certs https -v -ep openiddict.pfx -p 00000000-0000-0
 > `00000000-0000-0000-0000-000000000000` is the password of the certificate, you can change it to any password you want.
 
 >  Also, please remember to copy `openiddict.pfx` to the [Content Root Folder](https://learn.microsoft.com/en-us/dotnet/api/microsoft.aspnetcore.hosting.ihostingenvironment.contentrootpath?view=aspnetcore-7.0) of the `AuthServer` website.
+
+> It is recommended to use **two** RSA certificates, distinct from the certificate(s) used for HTTPS: one for encryption, one for signing.
+
+For more information, please refer to: https://documentation.openiddict.com/configuration/encryption-and-signing-credentials.html#registering-a-certificate-recommended-for-production-ready-scenarios