diff --git a/lib/hx509/cert.c b/lib/hx509/cert.c
index 3b5f62c5f..b460662aa 100644
--- a/lib/hx509/cert.c
+++ b/lib/hx509/cert.c
@@ -1320,7 +1320,7 @@ hx509_verify_path(hx509_context context,
 		    goto out;
 		}
 			
-		/* XXX verify issuer name */
+		/* XXX verify subject name is CN=XXX,<proxy issuer> */
 
 		free_ProxyCertInfo(&info);
 		break;