diff --git a/templates/app-nolayers/aspnet-core/README.md b/templates/app-nolayers/aspnet-core/README.md
index 5da147b18e..87dd910b9c 100644
--- a/templates/app-nolayers/aspnet-core/README.md
+++ b/templates/app-nolayers/aspnet-core/README.md
@@ -18,6 +18,10 @@ dotnet dev-certs https -v -ep openiddict.pfx -p 00000000-0000-0000-0000-00000000
 
 > `00000000-0000-0000-0000-000000000000` is the password of the certificate, you can change it to any password you want.
 
+> It is recommended to use **two** RSA certificates, distinct from the certificate(s) used for HTTPS: one for encryption, one for signing.
+
+For more information, please refer to: https://documentation.openiddict.com/configuration/encryption-and-signing-credentials.html#registering-a-certificate-recommended-for-production-ready-scenarios
+
 > See the [Configuring OpenIddict](https://docs.abp.io/en/abp/latest/Deployment/Configuring-OpenIddict#production-environment) documentation for more information.
 
 ### Install Client-Side Libraries
diff --git a/templates/app/aspnet-core/README.md b/templates/app/aspnet-core/README.md
index c090443a73..f97998f0b8 100644
--- a/templates/app/aspnet-core/README.md
+++ b/templates/app/aspnet-core/README.md
@@ -18,6 +18,10 @@ dotnet dev-certs https -v -ep openiddict.pfx -p 00000000-0000-0000-0000-00000000
 
 > `00000000-0000-0000-0000-000000000000` is the password of the certificate, you can change it to any password you want.
 
+> It is recommended to use **two** RSA certificates, distinct from the certificate(s) used for HTTPS: one for encryption, one for signing.
+
+For more information, please refer to: https://documentation.openiddict.com/configuration/encryption-and-signing-credentials.html#registering-a-certificate-recommended-for-production-ready-scenarios
+
 > See the [Configuring OpenIddict](https://docs.abp.io/en/abp/latest/Deployment/Configuring-OpenIddict#production-environment) documentation for more information.
 
 ### Install Client-Side Libraries