diff --git a/lib/hx509/TODO b/lib/hx509/TODO
index 4f58e7f13..d60c81bf3 100644
--- a/lib/hx509/TODO
+++ b/lib/hx509/TODO
@@ -11,6 +11,9 @@ SHA2 support
 x509 policy mappings support
 path validation
 
+crypto
+	make signing alg depend on signer if not given
+
 tests
 	nist tests
 		name constrains
@@ -30,3 +33,4 @@ pkcs10
 		web server/client
 		jabber server/client 
 		email
+		from existing cert